interoperability.blob.core.windows.net › files › M… · Web view[MS-OSCO]: Office Server ClickOnce Manifest Structure Intellectual Property Rights Notice for Open Specifications

[MS-OSCO]: Office Server ClickOnce Manifest Structure

Intellectual Property Rights Notice for Open Specifications Documentation

Technical Documentation. Microsoft publishes Open Specifications documentation for protocols, file formats, languages, standards as well as overviews of the interaction among each of these technologies.

Copyrights. This documentation is covered by Microsoft copyrights. Regardless of any other terms that are contained in the terms of use for the Microsoft website that hosts this documentation, you may make copies of it in order to develop implementations of the technologies described in the Open Specifications and may distribute portions of it in your implementations using these technologies or your documentation as necessary to properly document the implementation. You may also distribute in your implementation, with or without modification, any schema, IDL’s, or code samples that are included in the documentation. This permission also applies to any documents that are referenced in the Open Specifications.

No Trade Secrets. Microsoft does not claim any trade secret rights in this documentation.

Patents. Microsoft has patents that may cover your implementations of the technologies described in the Open Specifications. Neither this notice nor Microsoft's delivery of the documentation grants any licenses under those or any other Microsoft patents. However, a given Open Specification may be covered by Microsoft Open Specification Promise or the Community Promise. If you would prefer a written license, or if the technologies described in the Open Specifications are not covered by the Open Specifications Promise or Community Promise, as applicable, patent licenses are available by contacting [email protected].

Trademarks. The names of companies and products contained in this documentation may be covered by trademarks or similar intellectual property rights. This notice does not grant any licenses under those rights. For a list of Microsoft trademarks, visit www.microsoft.com/trademarks.

Fictitious Names. The example companies, organizations, products, domain names, email addresses, logos, people, places, and events depicted in this documentation are fictitious. No association with any real company, organization, product, domain name, email address, logo, person, place, or event is intended or should be inferred.

Reservation of Rights. All other rights are reserved, and this notice does not grant any rights other than specifically described above, whether by implication, estoppel, or otherwise.

Tools. The Open Specifications do not require the use of Microsoft programming tools or programming environments in order for you to develop an implementation. If you have access to Microsoft programming tools and environments you are free to take advantage of them. Certain Open Specifications are intended for use in conjunction with publicly available standard specifications and network programming art, and assumes that the reader either is familiar with the aforementioned material or has immediate access to it.

1 / 113

[MS-OSCO] — v20141019 Office Server ClickOnce Manifest Structure

Copyright © 2014 Microsoft Corporation.

Release: October 30, 2014

http://www.microsoft.com/trademarks

mailto:[email protected]

http://go.microsoft.com/fwlink/?LinkId=214448



Revision Summary

DateRevision History

Revision Class Comments

07/13/2009 0.1 Major Initial Availability

08/28/2009 0.2 Major Updated and revised the technical content

11/06/2009 0.3 Editorial Revised and edited the technical content





06/29/2010 1.04 Editorial Changed language and formatting in the technical content.

07/23/2010 1.04 No change No changes to the meaning, language, or formatting of the technical content.






01/20/2012 1.5 Minor Clarified the meaning of the technical content.








2 / 113




DateRevision History

Revision Class Comments



07/31/2014 2.0 Major Significantly changed the technical content.

10/30/2014 3.0 Major Significantly changed the technical content.

3 / 113




Table of Contents1 Introduction.................................................................................................10

1.1 Glossary.......................................................................................................................101.2 References...................................................................................................................10

1.2.1 Normative References...........................................................................................111.2.2 Informative References..........................................................................................12

1.3 Overview......................................................................................................................121.4 Relationship to Protocols and Other Structures...........................................................121.5 Applicability Statement................................................................................................121.6 Versioning and Localization.........................................................................................121.7 Vendor-Extensible Fields..............................................................................................13

2 Structures....................................................................................................142.1 Deployment Manifest...................................................................................................14

2.1.1 Target namespace: urn:schemas-microsoft-com:asm.v1.......................................142.1.1.1 Global Elements..............................................................................................14

2.1.1.1.1 assembly...................................................................................................142.1.1.2 Global Attributes.............................................................................................142.1.1.3 Complex Types................................................................................................14

2.1.1.3.1 assemblyIdentityType................................................................................142.1.1.3.2 descriptionType.........................................................................................152.1.1.3.3 assemblyType............................................................................................15

2.1.1.4 Simple Types...................................................................................................162.1.1.4.1 twoPartVersionType...................................................................................162.1.1.4.2 publicKeyTokenType...................................................................................172.1.1.4.3 fourPartVersionType...................................................................................172.1.1.4.4 fileNameStringType...................................................................................17

2.1.2 Target Namespace urn:schemas-microsoft-com:asm.v2.......................................182.1.2.1 Global Elements..............................................................................................18

2.1.2.1.1 deployment...............................................................................................182.1.2.1.2 dependency...............................................................................................182.1.2.1.3 publisherIdentity.......................................................................................18

2.1.2.2 Global Attributes.............................................................................................192.1.2.2.1 publisher...................................................................................................192.1.2.2.2 product......................................................................................................19

2.1.2.3 Complex Types................................................................................................192.1.2.3.1 deploymentType........................................................................................192.1.2.3.2 dependencyType.......................................................................................192.1.2.3.3 dependentAssemblyType...........................................................................202.1.2.3.4 hashType...................................................................................................212.1.2.3.5 assemblyIdentityType................................................................................212.1.2.3.6 publisherIdentityType................................................................................22

2.1.2.4 Simple Types...................................................................................................222.1.2.4.1 fourPartVersionType...................................................................................222.1.2.4.2 fileNameStringType...................................................................................232.1.2.4.3 publicKeyTokenType...................................................................................23

2.1.3 Target namespace: urn:schemas-microsoft-com:clickonce.v2...............................232.1.3.1 Global Elements..............................................................................................23

2.1.3.1.1 compatibleFrameworks.............................................................................232.1.3.2 Global Attributes.............................................................................................242.1.3.3 Complex Types................................................................................................24

2.1.3.3.1 compatibleFrameworksType......................................................................24

4 / 113




2.1.3.3.2 frameworkType..........................................................................................242.1.3.4 Simple Types...................................................................................................25

2.1.3.4.1 twoPartVersionType...................................................................................252.1.3.4.2 profileType.................................................................................................252.1.3.4.3 threePartVersionType.................................................................................26

2.2 Application Manifest....................................................................................................262.2.1 Target namespace: urn:schemas-microsoft-com:asm.v1.......................................26

2.2.1.1 Global Elements..............................................................................................262.2.1.1.1 assembly...................................................................................................26

2.2.1.2 Global Attributes.............................................................................................262.2.1.3 Complex Types................................................................................................26

2.2.1.3.1 assemblyIdentityType................................................................................262.2.1.3.2 assemblyType............................................................................................27

2.2.1.4 Simple Types...................................................................................................282.2.1.4.1 twoPartVersionType...................................................................................282.2.1.4.2 publicKeyTokenType...................................................................................282.2.1.4.3 fourPartVersionType...................................................................................292.2.1.4.4 fileNameStringType...................................................................................29


2.2.2.1.1 application.................................................................................................302.2.2.1.2 entryPoint..................................................................................................302.2.2.1.3 trustInfo.....................................................................................................302.2.2.1.4 dependency...............................................................................................302.2.2.1.5 file.............................................................................................................302.2.2.1.6 assemblyIdentity.......................................................................................312.2.2.1.7 publisherIdentity.......................................................................................31


2.2.2.3.1 applicationType.........................................................................................312.2.2.3.2 dependencyType.......................................................................................322.2.2.3.3 dependentAssemblyType...........................................................................322.2.2.3.4 hashType...................................................................................................332.2.2.3.5 dependentOSType.....................................................................................332.2.2.3.6 osVersionInfoType......................................................................................342.2.2.3.7 osType.......................................................................................................342.2.2.3.8 assemblyIdentityType................................................................................352.2.2.3.9 publisherIdentityType................................................................................352.2.2.3.10 entryPointType.........................................................................................362.2.2.3.11 trustInfoType...........................................................................................362.2.2.3.12 securityType............................................................................................372.2.2.3.13 applicationRequestMinimumType............................................................372.2.2.3.14 PermissionSetType...................................................................................382.2.2.3.15 defaultAssemblyRequestType..................................................................382.2.2.3.16 fileType....................................................................................................39

2.2.2.4 Simple Types...................................................................................................392.2.2.4.1 TwoByteVersion.........................................................................................392.2.2.4.2 OneByteVersion.........................................................................................392.2.2.4.3 dependencyTypeType................................................................................402.2.2.4.4 fileNameStringType...................................................................................402.2.2.4.5 fourPartVersionType...................................................................................412.2.2.4.6 publicKeyTokenType...................................................................................41


2.2.3.1.1 asmv3........................................................................................................41

5 / 113





2.2.3.3.1 requestedPrivilegesType............................................................................422.2.3.3.2 requestedExecutionLevelType...................................................................422.2.3.3.3 asmv3Type................................................................................................42

2.2.3.4 Simple Types...................................................................................................432.2.4 Target namespace: urn:schemas-microsoft-com:clickonce.v1...............................43

2.2.4.1 Global Elements..............................................................................................432.2.4.1.1 customHostSpecified.................................................................................43


2.2.4.3.1 customHostSpecifiedType..........................................................................432.2.4.4 Simple Types...................................................................................................44

2.2.5 Target namespace: urn:schemas-microsoft-com:vsta.v3.......................................442.2.5.1 Global Elements..............................................................................................44

2.2.5.1.1 addIn.........................................................................................................442.2.5.2 Global Attributes.............................................................................................442.2.5.3 Complex Types................................................................................................44

2.2.5.3.1 addInType..................................................................................................442.2.5.3.2 entryPointsCollectionType.........................................................................452.2.5.3.3 entryPointsType.........................................................................................452.2.5.3.4 entryPointType...........................................................................................462.2.5.3.5 postActionEntryPointType..........................................................................462.2.5.3.6 updateType................................................................................................472.2.5.3.7 postActionsType........................................................................................472.2.5.3.8 postActionType..........................................................................................482.2.5.3.9 postActionDataType...................................................................................482.2.5.3.10 applicationType.......................................................................................48

2.2.5.4 Simple Types...................................................................................................492.2.6 Target namespace: urn:schemas-microsoft-com:vsto.v4.......................................49

2.2.6.1 Global Elements..............................................................................................492.2.6.1.1 customizations..........................................................................................49


2.2.6.3.1 customizationsType...................................................................................492.2.6.3.2 customizationType.....................................................................................502.2.6.3.3 appAddInType............................................................................................50

2.2.6.4 Simple Types...................................................................................................512.2.6.4.1 loadBehaviorType......................................................................................512.2.6.4.2 keyStringType............................................................................................52

2.3 Strong Name Signature................................................................................................522.3.1 Target namespace: http://www.w3.org/2000/09/xmldsig#....................................52

2.3.1.1 Global Elements..............................................................................................522.3.1.1.1 Signature...................................................................................................522.3.1.1.2 SignatureValue..........................................................................................522.3.1.1.3 SignedInfo.................................................................................................532.3.1.1.4 CanonicalizationMethod............................................................................532.3.1.1.5 SignatureMethod.......................................................................................532.3.1.1.6 Reference..................................................................................................542.3.1.1.7 Transforms.................................................................................................542.3.1.1.8 Transform..................................................................................................542.3.1.1.9 DigestMethod............................................................................................542.3.1.1.10 DigestValue.............................................................................................552.3.1.1.11 KeyInfo....................................................................................................552.3.1.1.12 KeyValue..................................................................................................55

6 / 113




2.3.1.1.13 RSAKeyValue...........................................................................................552.3.1.2 Global Attributes.............................................................................................562.3.1.3 Complex Types................................................................................................56

2.3.1.3.1 SignatureType............................................................................................562.3.1.3.2 SignatureValueType...................................................................................562.3.1.3.3 SignedInfoType..........................................................................................572.3.1.3.4 CanonicalizationMethodType.....................................................................572.3.1.3.5 SignatureMethodType................................................................................582.3.1.3.6 ReferenceType...........................................................................................582.3.1.3.7 TransformsType.........................................................................................592.3.1.3.8 TransformType...........................................................................................592.3.1.3.9 DigestMethodType.....................................................................................602.3.1.3.10 KeyInfoType.............................................................................................602.3.1.3.11 KeyValueType..........................................................................................612.3.1.3.12 RSAKeyValueType....................................................................................61

2.3.1.4 Simple Types...................................................................................................622.3.1.4.1 CryptoBinary.............................................................................................622.3.1.4.2 DigestValueType........................................................................................62

2.3.2 Target namespace: http://schemas.microsoft.com/windows/rel/2005/reldata.......632.3.2.1 Global Elements..............................................................................................63

2.3.2.1.1 RelData......................................................................................................632.3.2.2 Global Attributes.............................................................................................632.3.2.3 Complex Types................................................................................................63

2.3.2.3.1 RelDataType..............................................................................................632.3.2.4 Simple Types...................................................................................................63

2.4 Software Publisher Signature.......................................................................................642.4.1 Target namespace: urn:mpeg:mpeg21:2003:01-REL-R-NS....................................64

2.4.1.1 Global Elements..............................................................................................642.4.1.1.1 license.......................................................................................................64


2.4.1.3.1 License......................................................................................................642.4.1.3.2 Grant.........................................................................................................652.4.1.3.3 Issuer.........................................................................................................652.4.1.3.4 Right..........................................................................................................66

2.4.1.4 Simple Types...................................................................................................662.4.2 Target namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode66

2.4.2.1 Global Elements..............................................................................................662.4.2.1.1 ManifestInformation..................................................................................662.4.2.1.2 SignedBy...................................................................................................662.4.2.1.3 AuthenticodePublisher...............................................................................662.4.2.1.4 Timestamp................................................................................................67


2.4.2.3.1 ManifestInformationType...........................................................................672.4.2.3.2 SignedByType............................................................................................682.4.2.3.3 AuthenticodePublisherType.......................................................................68

2.4.2.4 Simple Types...................................................................................................682.4.3 Target namespace: http://www.w3.org/2000/09/xmldsig#....................................69

2.4.3.1 Global Elements..............................................................................................692.4.3.1.1 Signature...................................................................................................692.4.3.1.2 SignatureValue..........................................................................................692.4.3.1.3 SignedInfo.................................................................................................692.4.3.1.4 CanonicalizationMethod............................................................................692.4.3.1.5 SignatureMethod.......................................................................................70

7 / 113




2.4.3.1.6 Reference..................................................................................................702.4.3.1.7 Transforms.................................................................................................702.4.3.1.8 Transform..................................................................................................712.4.3.1.9 DigestMethod............................................................................................712.4.3.1.10 DigestValue.............................................................................................712.4.3.1.11 Object......................................................................................................712.4.3.1.12 KeyInfo....................................................................................................722.4.3.1.13 KeyValue..................................................................................................722.4.3.1.14 X509Data................................................................................................722.4.3.1.15 RSAKeyValue...........................................................................................72


2.4.3.3.1 SignatureType............................................................................................732.4.3.3.2 SignatureValueType...................................................................................742.4.3.3.3 SignedInfoType..........................................................................................742.4.3.3.4 CanonicalizationMethodType.....................................................................742.4.3.3.5 SignatureMethodType................................................................................752.4.3.3.6 ReferenceType...........................................................................................752.4.3.3.7 TransformsType.........................................................................................762.4.3.3.8 TransformType...........................................................................................762.4.3.3.9 DigestMethodType.....................................................................................772.4.3.3.10 ObjectType...............................................................................................772.4.3.3.11 KeyInfoType.............................................................................................782.4.3.3.12 KeyValueType..........................................................................................792.4.3.3.13 X509DataType.........................................................................................792.4.3.3.14 RSAKeyValueType....................................................................................80

2.4.3.4 Simple Types...................................................................................................802.4.3.4.1 CryptoBinary.............................................................................................802.4.3.4.2 DigestValueType........................................................................................81

2.5 Algorithms...................................................................................................................812.5.1 HashTransforms.Identity........................................................................................812.5.2 Verification of Strong Name Signature...................................................................81

2.5.2.1 Conversion from RSA Public Key to publicKeyToken........................................822.5.2.2 CryptoAPI PUBLICKEYBLOB Format..................................................................822.5.2.3 PublicKeyBlob Format......................................................................................83

2.5.3 Software Publisher Identity Verification.................................................................832.5.3.1 REL License Verification...................................................................................842.5.3.2 Software Publisher Certificate Processing.......................................................842.5.3.3 Timestamp Processing.....................................................................................842.5.3.4 Converting an X.500 Distinguish Name to a String.........................................85

3 Structure Examples......................................................................................873.1 Deployment Manifest...................................................................................................873.2 Application Manifest....................................................................................................89

4 Security.......................................................................................................934.1 Security Considerations for Implementers...................................................................93

4.1.1 Digital Signatures..................................................................................................934.2 Index of Security Fields................................................................................................93

5 Appendix A: Full XML Schema.......................................................................945.1 Deployment Manifest XML Schema.............................................................................945.2 Application Manifest XML Schema...............................................................................975.3 http://schemas.microsoft.com/windows/pki/2005/Authenticode Schema..................105

6 Appendix B: Product Behavior.....................................................................107

8 / 113




7 Change Tracking.........................................................................................108

8 Index................................................................................................................................110

9 / 113




1 IntroductionThis document specifies the Office Server ClickOnce Manifest Structure. This structure is used to package one or more customizations and their dependent components.

Sections 1.7 and 2 of this specification are normative and can contain the terms MAY, SHOULD, MUST, MUST NOT, and SHOULD NOT as defined in [RFC2119]. All other sections and examples in this specification are informative.

1.1 GlossaryThe following terms are defined in [MS-OFCGLOS]:

add-inapplication manifestcertification authority (CA)deployment manifestdeployment packagedigestdigital signatureentry pointfully qualified class namehashlocalepackage filepublic keyroot elementstrong nametime stamp authoritytimestampXMLXML schema definition (XSD)

The following terms are specific to this document:

code access security permission set: A set of rules that are applied to an executable component to grant or restrict access to functionality and resources that are associated with that component.

post-deployment action: A method that can run before or after deployment events.

MAY, SHOULD, MUST, SHOULD NOT, MUST NOT: These terms (in all caps) are used as defined in [RFC2119]. All statements of optional behavior use either MAY, SHOULD, or SHOULD NOT.

1.2 ReferencesReferences to Microsoft Open Specification documents do not include a publishing year because links are to the latest version of the documents, which are updated frequently. References to other documents include a publishing year when one is available.

1.2.1 Normative ReferencesWe conduct frequent surveys of the normative references to assure their continued availability. If you have any issue with finding a normative reference, please contact [email protected]. We will assist you in finding the relevant information.

10 / 113







[Excl-C14N] Boyer, J., Eastlake 3rd, D. E., and Reagle, J., "Exclusive XML Canonicalization Version 1.0", July 2002, http://www.w3.org/TR/xml-exc-c14n/

[FIPS180-4] FIPS PUBS, "Secure Hash Standards (SHS)", March 2012, http://csrc.nist.gov/publications/fips/fips180-4/fips-180-4.pdf

[ISO/IEC-21000-5] International Organization for Standardization, "Information technology -- Multimedia framework (MPEG-21) -- Part 5: Rights Expression Language", 2004, http://www.iso.org/iso/catalogue_detail.htm?csnumber=36095

[ITUX680] ITU-T, "Abstract Syntax Notation One (ASN.1): Specification of Basic Notation", Recommendation X.680, July 2002, http://www.itu.int/ITU-T/studygroups/com17/languages/X.680-0207.pdf

[PKCS9] RSA Laboratories, "PKCS #9: Selected Attribute Types", PKCS #9, version 1.1, November 1993, http://www.emc.com/emc-plus/rsa-labs/standards-initiatives/pkcs-9-selected-attribute-types.htm

[RFC1321] Rivest, R., "The MD5 Message-Digest Algorithm", RFC 1321, April 1992, http://www.ietf.org/rfc/rfc1321.txt

[RFC1779] Kille, S., "A String Representation of Distinguished Names", RFC 1779, March 1995, http://www.rfc-editor.org/rfc/rfc1779.txt

[RFC2045] Freed, N., and Borenstein, N., "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies", RFC 2045, November 1996, http://www.rfc-editor.org/rfc/rfc2045.txt

[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997, http://www.rfc-editor.org/rfc/rfc2119.txt

[RFC2315] Kaliski, B., "PKCS #7: Cryptographic Message Syntax Version 1.5", RFC 2315, March 1998, http://www.ietf.org/rfc/rfc2315.txt

[RFC3279] Polk, W., Housley, R., and Bassham, L., "Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 3279, April 2002, http://www.ietf.org/rfc/rfc3279.txt

[RFC3280] Housley, R., Polk, W., Ford, W., and Solo, D., "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 3280, April 2002, http://www.ietf.org/rfc/rfc3280.txt

[RFC3447] Jonsson, J. and Kaliski, B., "Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1", RFC 3447, February 2003, http://www.ietf.org/rfc/rfc3447.txt

[W3C-XSD] World Wide Web Consortium, "XML Schema Part 2: Datatypes Second Edition", October 2004, http://www.w3.org/TR/2004/REC-xmlschema-2-20041028

[XMLDSig] Bartel, M., Boyer, J., Fox, B., et al., "XML-Signature Syntax and Processing", W3C Recommendation, February 2002, http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/

[XMLSCHEMA1] Thompson, H., Beech, D., Maloney, M., and Mendelsohn, N., Eds., "XML Schema Part 1: Structures", W3C Recommendation, May 2001, http://www.w3.org/TR/2001/REC-xmlschema-1-20010502/

11 / 113




















http://go.microsoft.com/fwlink/?LinkID=161132&clcid=0x409



1.2.2 Informative References[MS-BCSDPFFS] Microsoft Corporation, "Business Connectivity Services Deployment Package File Format Specification".

[MS-OFCGLOS] Microsoft Corporation, "Microsoft Office Master Glossary".

[XML] World Wide Web Consortium, "Extensible Markup Language (XML) 1.0 (Fourth Edition)", W3C Recommendation 16 August 2006, edited in place 29 September 2006, http://www.w3.org/TR/2006/REC-xml-20060816/

1.3 OverviewThis structure is used to create a deployment package (2) for deploying one or more customizations and their related components to a computer.

A deployment package (2) consists of a deployment manifest file (section 2.1) and an application manifest file (section 2.2). In addition to the manifest files, the deployment package (2) also contains additional files as specified by the application manifest.

The deployment manifest file lists the identity and version of the deployment package (2). Contents of the deployment manifest also identify the publisher of the deployment package (2). The deployment manifest links to the application manifest for the deployment package (2).

The application manifest file lists the files associated with the deployment package (2) and their relationship to the deployment package (2). The application manifest specifies run-time behavior about one or many customizations included in the deployment package (2). The application manifest describes the location of package files but does not describe the location to deploy the package files. An implementation of this structure can deploy package files to a temporary cache or provide the user with a choice of the final location.

1.4 Relationship to Protocols and Other StructuresThe XML based structures in this document are defined according to the XML standard described in [XML].

The manifest files in this structure are signed using XML signature syntax and processing rules as described by [XMLDSig].

[MS-BCSDPFFS] section 1.3 is an example of an implementation that uses this structure.

1.5 Applicability StatementThis structure can be used to package and deploy one or more customizations. An implementation of this structure can package customizations dynamically and deploy them to a computer to customize applications running on the computer. This structure provides information necessary to successfully deploy a package and does not assure the functionality of the customizations present in the package.

1.6 Versioning and LocalizationNone.

1.7 Vendor-Extensible FieldsNone.

12 / 113







2 StructuresIn the following sections, the schema definition might differ from the processing rules imposed by the protocol. The XSD in this specification provides a base description of the file format. The text that introduces the XSD specifies additional restrictions that reflect protocol behavior. For example, the schema definition might allow for an element to be empty, null, or not present but the behavior of the protocol as specified restricts the same elements to being non-empty, present, and not null.

A deployment package (2) specifies the location of package files for deployment. A deployment package (2) MUST contain the following files:

A deployment manifest file as specified in section 2.1 of this document.

An application manifest file as specified in section 2.2 of this document.

At least one package file.

2.1 Deployment ManifestThe deployment manifest is a XML file that specifies the identity and version information of the deployment package (2). The file name of the deployment manifest MUST end with ".vsto". The file size of the deployment manifest MUST be less than 16 megabytes. The root element of the deployment manifest MUST be assembly (section 2.1.1.1.1).

2.1.1 Target namespace: urn:schemas-microsoft-com:asm.v1

2.1.1.1 Global Elements

2.1.1.1.1 assemblyTarget namespace: urn:schemas-microsoft-com:asm.v1

An assemblyType element that specifies a deployment manifest.

The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment defines the contents of this element.

<xs:element name="assembly" type="assemblyType"/>

2.1.1.2 Global AttributesNone.

2.1.1.3 Complex Types

2.1.1.3.1 assemblyIdentityTypeTarget namespace: urn:schemas-microsoft-com:asm.v1

Referenced by: assemblyType

The assemblyIdentityType complex type specifies an identifier for a deployment package (2).

Attributes:

13 / 113





name : A fileNameStringType attribute that specifies the name. The length of the string value MUST be less than 252 characters.

version : A fourPartVersionType attribute that specifies the version.

processorArchitecture : A string ([W3C-XSD] section 3.2.1) attribute that specifies the processor architecture.

publicKeyToken : A publicKeyTokenType attribute that specifies the last 8 bytes of the SHA-1 hash ([FIPS180-4] section 6.1) of the public key used to generate the strong name signature (section 2.3) for the deployment manifest in accordance with section 2.5.2.1.

language : A string ([W3C-XSD] section 3.2.1) attribute that specifies the locale.

The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment defines the contents of this complex type.

<xs:complexType name="assemblyIdentityType"> <xs:attribute name="name" type="asm.v1:fileNameStringType" use="required"/> <xs:attribute name="version" type="asm.v1:fourPartVersionType" use="required"/> <xs:attribute name="processorArchitecture" type="xs:string" use="required" fixed="msil"/> <xs:attribute name="publicKeyToken" type="asm.v1:publicKeyTokenType" use="required"/> <xs:attribute name="language" type="xs:string" use="required" fixed="neutral"/></xs:complexType>

2.1.1.3.2 descriptionTypeTarget namespace: urn:schemas-microsoft-com:asm.v1


The descriptionType complex type specifies the description of a deployment package (2). The combined length of publisher and product attribute values MUST be less than 261 characters.

Attributes:

publisher : A publisher attribute that specifies the publisher name.

product : A product attribute that specifies the product name.


<xs:complexType name="descriptionType" mixed="true"> <xs:attribute ref="asm.v2:publisher" use="required"/> <xs:attribute ref="asm.v2:product" use="required"/></xs:complexType>

2.1.1.3.3 assemblyTypeTarget namespace: urn:schemas-microsoft-com:asm.v1

Referenced by: assembly

The assemblyType complex type specifies a deployment manifest.

Child Elements:

14 / 113









assemblyIdentity : An assemblyIdentityType element that specifies an identifier for the deployment package (2).

description : A descriptionType element that specifies the description.

deployment : A deployment element that specifies how files in the deployment package (2) are stored.

compatibleFrameworks : A compatibleFrameworks element that specifies the framework versions on which this application can run.

dependency : A dependency element that specifies a dependency on an application manifest (section 2.2).

publisherIdentity : A publisherIdentity element that specifies the publisher of a deployment package (2).

Signature : A SignatureType element that specifies the necessary information to validate a signed deployment manifest.

Attributes:

manifestVersion : A twoPartVersionType attribute that specifies the manifest version.


<xs:complexType name="assemblyType"> <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v1:assemblyIdentityType"/> <xs:element name="description" type="descriptionType"/> <xs:element ref="asm.v2:deployment"/> <xs:element ref="clickonce.v2:compatibleFrameworks"/> <xs:element ref="asm.v2:dependency"/> <xs:element ref="asm.v2:publisherIdentity"/> <xs:element ref="ds:Signature"/> </xs:sequence> <xs:attribute name="manifestVersion" type="asm.v1:twoPartVersionType" use="required" fixed="1.0"/></xs:complexType>

2.1.1.4 Simple Types

2.1.1.4.1 twoPartVersionTypeTarget namespace: urn:schemas-microsoft-com:asm.v1


The twoPartVersionType simple type specifies a version.

The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment defines the contents of this simple type.

<xs:simpleType name="twoPartVersionType"> <xs:restriction base="xs:string">

15 / 113






<xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])"/> </xs:restriction></xs:simpleType>

2.1.1.4.2 publicKeyTokenTypeTarget namespace: urn:schemas-microsoft-com:asm.v1

Referenced by: assemblyIdentityType

The publicKeyTokenType simple type specifies the last 8 bytes of the SHA-1 hash as specified by [FIPS180-4] section 6.1 of a public key in accordance with section 2.5.2.1.


<xs:simpleType name="publicKeyTokenType"> <xs:restriction base="xs:string"> <xs:pattern value="([0-9]|[a-f]|[A-F]){16}"/> </xs:restriction></xs:simpleType>

2.1.1.4.3 fourPartVersionTypeTarget namespace: urn:schemas-microsoft-com:asm.v1


The fourPartVersionType simple type specifies a version.


<xs:simpleType name="fourPartVersionType"> <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])"/> </xs:restriction></xs:simpleType>

2.1.1.4.4 fileNameStringTypeTarget namespace: urn:schemas-microsoft-com:asm.v1


The fileNameStringType simple type specifies a string for a file name.


16 / 113








<xs:simpleType name="fileNameStringType"> <xs:restriction base="xs:string"> <xs:pattern value="([\u0020]|[\u0021]|[\u0024]|[\u0025]|[\u0027-\u0029]|[\u002B-\u002E]|[\u0030-\u0039]|[\u003B]|[\u003D]|[\u0040-\u005B]|[\u005D-\u007B]|[\u007D-\uFFFD]|[\u10000-\u10FFFF])*"/> </xs:restriction></xs:simpleType>

2.1.2 Target Namespace urn:schemas-microsoft-com:asm.v2


2.1.2.1.1 deploymentTarget namespace: urn:schemas-microsoft-com:asm.v2

A deploymentType element that specifies a global element that is referenced by assemblyType.


<xs:element name="deployment" type="asm.v2:deploymentType"/>

2.1.2.1.2 dependencyTarget namespace: urn:schemas-microsoft-com:asm.v2

A dependencyType element that specifies a global element that is referenced by assemblyType.


<xs:element name="dependency" type="asm.v2:dependencyType"/>

2.1.2.1.3 publisherIdentityTarget namespace: urn:schemas-microsoft-com:asm.v2

A publisherIdentityType element that specifies a global element that is referenced by assemblyType.


<xs:element name="publisherIdentity" type="asm.v2:publisherIdentityType"/>

2.1.2.2 Global Attributes

2.1.2.2.1 publisherTarget namespace: urn:schemas-microsoft-com:asm.v2

A fileNameStringType attribute that specifies the publisher name.

17 / 113







The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment defines the contents of this attribute.

<xs:attribute name="publisher" type="asm.v2:fileNameStringType" fixed="DefaultPublisher"/>

2.1.2.2.2 productTarget namespace: urn:schemas-microsoft-com:asm.v2

A fileNameStringType attribute that specifies the product name.

The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment defines the contents of this attribute.

<xs:attribute name="product" type="asm.v2:fileNameStringType"/>


2.1.2.3.1 deploymentTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: deployment

The deploymentType complex type specifies how files in the deployment package (2) are stored.

Attributes:

install : A boolean ([W3C-XSD] section 3.2.2) attribute that specifies a reserved value.

mapFileExtensions : A boolean ([W3C-XSD] section 3.2.2) attribute that specifies whether package files have the string ".deploy" appended to the end of the file name. For example: the package file "file.dll" would be stored as "file.dll.deploy" if the value is "true".


<xs:complexType name="deploymentType"> <xs:attribute name="install" type="xs:boolean" use="required" fixed="false"/> <xs:attribute name="mapFileExtensions" type="xs:boolean" use="optional" default="false"/></xs:complexType>

2.1.2.3.2 dependencyTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: dependency

The dependencyType complex type specifies a container for a dependentAssemblyType element.

Child Elements:

dependentAssembly : A dependentAssemblyType element that specifies the application manifest (section 2.2).

18 / 113










<xs:complexType name="dependencyType"> <xs:sequence> <xs:choice> <xs:element name="dependentAssembly" type="asm.v2:dependentAssemblyType"/> </xs:choice> </xs:sequence></xs:complexType>

2.1.2.3.3 dependentAssemblyTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: dependencyType

The dependentAssemblyType complex type specifies an application manifest (section 2.2).

Child Elements:

assemblyIdentity : An assemblyIdentityType element that specifies an identifier for the application manifest (section 2.2).

hash : A hashType element that specifies the hash of the application manifest (section 2.2).

Attributes:

dependencyType : A string ([W3C-XSD] section 3.2.1) attribute that specifies a dependency on an application manifest (section 2.2).

codebase : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies a path to an application manifest (section 2.2).

size : An integer ([W3C-XSD] section 3.3.13) attribute that specifies the size of an application manifest (section 2.2) in bytes.


<xs:complexType name="dependentAssemblyType"> <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v2:assemblyIdentityType"/> <xs:element name="hash" type="asm.v2:hashType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="dependencyType" type="xs:string" use="required" fixed="install"/> <xs:attribute name="codebase" type="xs:anyURI"/> <xs:attribute name="size" type="xs:integer" use="optional"/></xs:complexType>

2.1.2.3.4 hashTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: dependentAssemblyType

The hashType complex type specifies a hash of a file as specified by [XMLDSig] section 4.3.3.

19 / 113










The Transforms container element ([XMLDSig] section 4.3.3.4) MUST contain one Transform element. The value of the Algorithm attribute of the Transform element ([XMLDSig] section 4.3.3.4) MUST be "urn:schemas-microsoft-com:HashTransforms.Identity" (section 2.5.1).

The value of the Algorithm attribute of the DigestMethod ([XMLDSig] section 4.3.3.5) MUST be "http://www.w3.org/2000/09/xmldsig#sha1".

All other attributes are ignored.


<xs:complexType name="hashType"> <xs:complexContent> <xs:extension base="ds:ReferenceType"> <xs:sequence> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:extension> </xs:complexContent></xs:complexType>



The assemblyIdentityType complex type specifies an identifier of an application manifest.

Attributes:



type : A string ([W3C-XSD] section 3.2.1) attribute that specifies the reserved value.


publicKeyToken : A publicKeyTokenType attribute that specifies the last 8 bytes of the SHA-1 hash ([FIPS180-4] section 6.1) of the public key used to generate the strong name signature (section 2.3) for the application manifest in accordance with section 2.5.2.1.



<xs:complexType name="assemblyIdentityType"> <xs:attribute name="name" type="asm.v2:fileNameStringType" use="required"/> <xs:attribute name="version" type="asm.v2:fourPartVersionType" use="required"/> <xs:attribute name="type" type="xs:string" use="optional" fixed="win32"/> <xs:attribute name="processorArchitecture" type="xs:string" use="required" fixed="msil"/>

20 / 113













<xs:attribute name="publicKeyToken" type="asm.v2:publicKeyTokenType" use="required"/> <xs:attribute name="language" type="xs:string" use="required" fixed="neutral"/></xs:complexType>

2.1.2.3.6 publisherIdentityTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: publisherIdentity

The publisherIdentityType complex type specifies a publisher of a deployment package (2).

Attributes:

name : A string ([W3C-XSD] section 3.2.1) attribute that specifies the distinguished name of the publisher as specified in [RFC1779] section 2.3.

issuerKeyHash : A string ([W3C-XSD] section 3.2.1) attribute that specifies the SHA-1 hash ([FIPS180-4] section 6.1) of the public key in the certificate of the certification authority (CA) (1) that issued the publisher’s certificate ([RFC3280]). The SHA-1 public key hash is computed over the value of the subjectPublicKey field in the subjectPublicKeyInfo field ([RFC3280] section 4.1). The tag and length MUST be excluded from the value before calculation.


<xs:complexType name="publisherIdentityType"> <xs:attribute name="name" type="xs:string"/> <xs:attribute name="issuerKeyHash" type="xs:string"/></xs:complexType>




The fourPartVersionType specifies a version number.



21 / 113













Referenced by: publisher, product, assemblyIdentityType






The publicKeyTokenType simple type specifies the last 8 bytes of the SHA-1 hash, as specified by [FIPS180-4] section 6.1, of a public key in accordance with section 2.5.2.1.



2.1.3 Target namespace: urn:schemas-microsoft-com:clickonce.v2


2.1.3.1.1 compatibleFrameworksTarget namespace: urn:schemas-microsoft-com:clickonce.v2

A compatibleFrameworksType element<1> specifies a global element that is referenced by assemblyType.


<xs:element name="compatibleFrameworks" type="clickonce.v2:compatibleFrameworksType"/>

22 / 113










2.1.3.3.1 compatibleFrameworksTypeTarget namespace: urn:schemas-microsoft-com:clickonce.v2

Referenced by: compatibleFrameworks section 2.1.3.1.1

The compatibleFrameworksType complex type contains one or more framework elements that specify the versions on which this application can run.

Element:

framework: A frameworkType element that specifies the framework versions on which this application can run.


<xs:complexType name="compatibleFrameworksType"> <xs:sequence> <xs:choice> <xs:element name="framework" type="clickonce.v2:frameworkType" minOccurs="1" maxOccurs="unbounded"/> </xs:choice> </xs:sequence> </xs:complexType>

2.1.3.3.2 frameworkTypeTarget namespace: urn:schemas-microsoft-com:clickonce.v2

Referenced by: compatibleFrameworksType section 2.1.3.3.1

The frameworkType complex type specifies the versions on which this application can run.

Attributes:

targetVersion: A twoPartVersionType attribute that specifies the version number of the target on which this application can run.

profile: A profileType attribute that specifies the profile of the target on which this application can run.

supportedRuntime: A threePartVersionType attribute that specifies the version number of the runtime associated with the target on which this application can run.


<xs:complexType name="frameworkType">

23 / 113






<xs:attribute name="targetVersion" type="clickonce.v2:twoPartVersionType" use="required"/> <xs:attribute name="profile" type="clickonce.v2:profileType" use="required"/> <xs:attribute name="supportedRuntime" type="clickonce.v2:threePartVersionType" use="required"/> </xs:complexType>


2.1.3.4.1 twoPartVersionTypeTarget namespace: urn:schemas-microsoft-com:clickonce.v2

Referenced by: frameworkType section 2.1.3.3.2

The twoPartVersionType simple type specifies the version number of the target on which this application can run.


<xs:simpleType name="twoPartVersionType"> <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType>

2.1.3.4.2 profileTypeTarget namespace: urn:schemas-microsoft-com:clickonce.v2


The profileType simple type specifies the profile of the target on which this application can run.


<xs:simpleType name="profileType"> <xs:restriction base="xs:string"> <xs:enumeration value="Full"/> <xs:enumeration value="Client"/> </xs:restriction> </xs:simpleType>

2.1.3.4.3 threePartVersionTypeTarget namespace: urn:schemas-microsoft-com:clickonce.v2


The threePartVersionType simple type specifies the version number of the runtime associated with the target on which this application can run.

24 / 113







<xs:simpleType name="threePartVersionType"> <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType>

2.2 Application ManifestThe application manifest is a XML file that specifies the dependencies and entry points for customizations included in the deployment package (2). The file name MUST end with ".manifest". The file size of the application manifest MUST be less than 16 megabytes. The root element of the application manifest MUST be assembly (section 2.2.1.1.1).



2.2.1.1.1 assemblyTarget namespace: urn:schemas-microsoft-com:asm.v1

An assemblyType element that specifies an application manifest.


<xs:element name="assembly" type="assemblyType"/>





The assemblyIdentityType complex type specifies an identifier for an application manifest.

Attributes:



25 / 113






type : A string ([W3C-XSD] section 3.2.1) attribute that specifies a reserved value.


publicKeyToken : A publicKeyTokenType attribute that specifies the last 8 bytes of the SHA-1 hash ([FIPS180-4] section 6.1) of the public key used to generate the strong name signature (section 2.3) for the application manifest in accordance with section 2.5.2.1.



<xs:complexType name="assemblyIdentityType"> <xs:attribute name="name" type="asm.v1:fileNameStringType" use="required"/> <xs:attribute name="version" type="asm.v1:fourPartVersionType" use="required"/> <xs:attribute name="type" type="xs:string" use="optional" fixed="win32"/> <xs:attribute name="processorArchitecture" type="xs:string" use="required" fixed="msil"/> <xs:attribute name="publicKeyToken" type="asm.v1:publicKeyTokenType" use="required"/> <xs:attribute name="language" type="xs:string" use="required" fixed="neutral"/></xs:complexType>

2.2.1.3.2 assemblyTypeTarget namespace: urn:schemas-microsoft-com:asm.v1

Referenced by: assembly

The assemblyType complex type specifies an application manifest.

Child Elements:

assemblyIdentity : An assemblyIdentityType element that specifies an identifier for the application manifest.

application : An application element that specifies ignored data.

entryPoint : An entryPoint element that specifies an entry point.

trustInfo : A trustInfo element that specifies a container for a securityType element.

dependency : A dependency element that specifies a dependency required for the deployment package (2).

file : A file element that specifies a file that is a part of the deployment package (2).

addIn : An addIn element that specifies run-time behavior of the deployment package (2).

publisherIdentity : A publisherIdentity element that specifies the publisher of the deployment package (2).

Signature : A SignatureType element that specifies the necessary information to validate a signed application manifest.

Attributes:

manifestVersion : A twoPartVersionType attribute that specifies the version of the application manifest.

26 / 113










<xs:complexType name="assemblyType"> <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v1:assemblyIdentityType"/> <xs:element ref="asm.v2:application"/> <xs:element ref="asm.v2:entryPoint"/> <xs:element ref="asm.v2:trustInfo"/> <xs:element ref="asm.v2:dependency" minOccurs="0" maxOccurs="24575"/> <xs:element ref="asm.v2:file" minOccurs="0" maxOccurs="24575"/> <xs:element ref="vsta.v3:addIn"/> <xs:element ref="asm.v2:publisherIdentity"/> <xs:element ref="ds:Signature"/> </xs:sequence> <xs:attribute name="manifestVersion" type="asm.v1:twoPartVersionType" use="required" fixed="1.0"/></xs:complexType>


2.2.1.4.1 twoPartVersionTypeTarget namespace: urn:schemas-microsoft-com:asm.v1


The twoPartVersionType simple type specifies a version.


<xs:simpleType name="twoPartVersionType"> <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])"/> </xs:restriction></xs:simpleType>



The publicKeyTokenType simple type specifies the last 8 bytes of the SHA-1 hash, as specified by [FIPS180-4] section 6.1, of a public key in accordance with section 2.5.2.1.


<xs:simpleType name="publicKeyTokenType"> <xs:restriction base="xs:string"> <xs:pattern value="([0-9]|[a-f]|[A-F]){16}"/>

27 / 113








</xs:restriction></xs:simpleType>



The fourPartVersionType type specifies a version.










2.2.2.1.1 applicationTarget namespace: urn:schemas-microsoft-com:asm.v2

An applicationType element that specifies a global element that is referenced by assemblyType.


28 / 113







<xs:element name="application" type="asm.v2:applicationType"/>

2.2.2.1.2 entryPointTarget namespace: urn:schemas-microsoft-com:asm.v2

An entryPointType element that specifies a global element that is referenced by assemblyType.


<xs:element name="entryPoint" type="asm.v2:entryPointType"/>

2.2.2.1.3 trustInfoTarget namespace: urn:schemas-microsoft-com:asm.v2

A trustInfoType element that specifies a global element that is referenced by assemblyType.


<xs:element name="trustInfo" type="asm.v2:trustInfoType"/>

2.2.2.1.4 dependencyTarget namespace: urn:schemas-microsoft-com:asm.v2

A dependencyType element that specifies a global element that is referenced by assemblyType.


<xs:element name="dependency" type="asm.v2:dependencyType"/>

2.2.2.1.5 fileTarget namespace: urn:schemas-microsoft-com:asm.v2

A fileType element that specifies a global element that is referenced by assemblyType.


<xs:element name="file" type="asm.v2:fileType"/>

2.2.2.1.6 assemblyIdentityTarget namespace: urn:schemas-microsoft-com:asm.v2

An assemblyIdentityType (section 2.2.1.3.1) element that specifies a global element that is referenced by entryPointType (section 2.2.5.3.4), postActionEntryPointType (section 2.2.5.3.5).

29 / 113









<xs:element name="assemblyIdentity" type="asm.v2:assemblyIdentityType"/>

2.2.2.1.7 publisherIdentityTarget namespace: urn:schemas-microsoft-com:asm.v2

A publisherIdentityType element that specifies a global element that is referenced by assemblyType.


<xs:element name="publisherIdentity" type="asm.v2:publisherIdentityType"/>



2.2.2.3.1 applicationTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: application

The applicationType complex type specifies ignored data.


<xs:complexType name="applicationType"/>

2.2.2.3.2 dependencyTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: dependency

The dependencyType complex type specifies a dependency required by the deployment package (2).

Child Elements:

dependentAssembly : A dependentAssemblyType element that specifies the assembly is required by the deployment package (2).

dependentOS : A dependentOSType element that specifies a minimum operating system requirement of a deployment package (2).


30 / 113








<xs:complexType name="dependencyType"> <xs:sequence> <xs:choice> <xs:element name="dependentAssembly" type="asm.v2:dependentAssemblyType"/> <xs:element name="dependentOS" type="asm.v2:dependentOSType"/> </xs:choice> </xs:sequence></xs:complexType>

2.2.2.3.3 dependentAssemblyTypeTarget namespace: urn:schemas-microsoft-com:asm.v2


The dependentAssemblyType complex type specifies an assembly that is required by the deployment package (2).

Child Elements:

assemblyIdentity : An assemblyIdentityType element that specifies the unique identifier of the assembly.

hash : A hashType element that specifies a hash of the assembly.

Attributes:

dependencyType : A dependencyTypeType attribute that specifies the type of the dependency of the deployment package (2) on the assembly.

codebase : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies a path to the dependent assembly.

size : An integer ([W3C-XSD] section 3.3.13) attribute that specifies the file size in bytes of the dependent assembly.

allowDelayedBinding : A boolean ([W3C-XSD] section 3.2.2) attribute that specifies a reserved value.


<xs:complexType name="dependentAssemblyType"> <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v2:assemblyIdentityType"/> <xs:element name="hash" type="asm.v2:hashType" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> <xs:attribute name="dependencyType" type="asm.v2:dependencyTypeType" use="optional" default="preRequisite"/> <xs:attribute name="codebase" type="xs:anyURI"/> <xs:attribute name="size" type="xs:integer" use="optional"/> <xs:attribute name="allowDelayedBinding" type="xs:boolean" use="required" fixed="true"/></xs:complexType>

2.2.2.3.4 hashTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

31 / 113








Referenced by: dependentAssemblyType, fileType

The hashType complex type specifies a hash of a file as specified by [XMLDSig] section 4.3.3.

The Transforms container element ([XMLDSig] section 4.3.3.4) MUST contain one Transform element. The value of the Algorithm attribute of the Transform element ([XMLDSig] section 4.3.3.4) MUST be "urn:schemas-microsoft-com:HashTransforms.Identity" (section 2.5.1).

The value of the Algorithm attribute of the DigestMethod ([XMLDSig] section 4.3.3.5) MUST be "http://www.w3.org/2000/09/xmldsig#sha1".

All other attributes are ignored.


<xs:complexType name="hashType"> <xs:complexContent> <xs:extension base="ds:ReferenceType"> <xs:sequence> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/> </xs:sequence> </xs:extension> </xs:complexContent></xs:complexType>

2.2.2.3.5 dependentOSTypeTarget namespace: urn:schemas-microsoft-com:asm.v2


A dependentOSType element that specifies a minimum operating system requirement of a deployment package (2).

Child Elements:

osVersionInfo : An osVersionInfoType element that specifies the minimum operating system version.


<xs:complexType name="dependentOSType"> <xs:sequence> <xs:element name="osVersionInfo" type="asm.v2:osVersionInfoType"/> </xs:sequence></xs:complexType>

2.2.2.3.6 osVersionInfoTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: dependentOSType

The osVersionInfoType complex type specifies an operating system version.

32 / 113










Child Elements:

os : An osType element that specifies the operation system version.


<xs:complexType name="osVersionInfoType"> <xs:sequence> <xs:element name="os" type="asm.v2:osType"/> </xs:sequence></xs:complexType>

2.2.2.3.7 osTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: osVersionInfoType

The osType complex type specifies an operation system version.

Attributes:

majorVersion : A TwoByteVersion attribute that specifies the major version.

minorVersion : A TwoByteVersion attribute that specifies the minor version.

buildNumber : A TwoByteVersion attribute that specifies the build number.

servicePackMajor : A OneByteVersion attribute that specifies the service pack major version.


<xs:complexType name="osType"> <xs:attribute name="majorVersion" type="asm.v2:TwoByteVersion" use="required" fixed="4"/> <xs:attribute name="minorVersion" type="asm.v2:TwoByteVersion" use="required" fixed="10"/> <xs:attribute name="buildNumber" type="asm.v2:TwoByteVersion" use="required" fixed="0"/> <xs:attribute name="servicePackMajor" type="asm.v2:OneByteVersion" use="required" fixed="0"/></xs:complexType>


Referenced by: dependentAssemblyType, assemblyIdentity

The assemblyIdentityType complex type specifies an identifier of an assembly.

Attributes:



33 / 113






type : A string ([W3C-XSD] section 3.2.1) attribute that specifies a reserved value.


publicKeyToken : A publicKeyTokenType attribute that specifies the last 8 bytes of the SHA-1 hash ([FIPS180-4] section 6.1) of the public key used to verify the assembly in accordance with section 2.5.2.1.



<xs:complexType name="assemblyIdentityType"> <xs:attribute name="name" type="asm.v2:fileNameStringType" use="required"/> <xs:attribute name="version" type="asm.v2:fourPartVersionType" use="required"/> <xs:attribute name="type" type="xs:string" use="optional" fixed="win32"/> <xs:attribute name="processorArchitecture" type="xs:string" use="optional" fixed="msil"/> <xs:attribute name="publicKeyToken" type="asm.v2:publicKeyTokenType" use="optional"/> <xs:attribute name="language" type="xs:string" use="optional" fixed="neutral"/></xs:complexType>

2.2.2.3.9 publisherIdentityTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: publisherIdentity

The publisherIdentityType complex type specifies a publisher of a deployment package (2).

Attributes:

name : A string ([W3C-XSD] section 3.2.1) attribute that specifies the distinguished name of the publisher as specified in [RFC1779] section 2.3.

issuerKeyHash : A string ([W3C-XSD] section 3.2.1) attribute that specifies the SHA-1 hash ([FIPS180-4] section 6.1) of the public key in the certificate of the certification authority (CA) (1) that issued the publisher’s certificate ([RFC3280]). The SHA-1 public key hash is computed over the value of the subjectPublicKey field in the subjectPublicKeyInfo field ([RFC3280] section 4.1). The tag and length MUST be excluded from the value before calculation.


<xs:complexType name="publisherIdentityType"> <xs:attribute name="name" type="xs:string"/> <xs:attribute name="issuerKeyHash" type="xs:string"/></xs:complexType>

2.2.2.3.10 entryPointTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: entryPoint

The entryPointType complex type specifies an entry point.

34 / 113
















Child Elements:

customHostSpecified : A customHostSpecified element specifies whether the entry points are defined in the addin element.


<xs:complexType name="entryPointType"> <xs:sequence> <xs:element ref="co.v1:customHostSpecified"/> </xs:sequence></xs:complexType>

2.2.2.3.11 trustInfoTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: trustInfo

The trustInfoType complex type specifies a container for a securityType element.

Child Elements:

security : A securityType element that specifies the permissions requested by the deployment package (2).

asmv3 : An asmv3 element that specifies ignored data.


<xs:complexType name="trustInfoType"> <xs:sequence> <xs:element name="security" type="asm.v2:securityType"/> <xs:element ref="asm.v3:asmv3" minOccurs="0"/> </xs:sequence></xs:complexType>

2.2.2.3.12 securityTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: trustInfoType

The securityType complex type elements specifies the permissions requested by a deployment package (2).

Child Elements:

applicationRequestMinimum : An applicationRequestMinimumType element that specifies permissions requested by the deployment package (2).

requestedPrivileges : A requestedPrivilegesType element that specifies a reserved value.

asmv3 : An asmv3 element that specifies ignored data.

35 / 113







<xs:complexType name="securityType"> <xs:sequence> <xs:element name="applicationRequestMinimum" type="asm.v2:applicationRequestMinimumType"/> <xs:element name="requestedPrivileges" type="asm.v3:requestedPrivilegesType"/> <xs:element ref="asm.v3:asmv3" minOccurs="0"/> </xs:sequence></xs:complexType>

2.2.2.3.13 applicationRequestMinimumTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: securityType

The applicationRequestMinimumType complex type specifies permissions requested by a deployment package (2).

Child Elements:

PermissionSet : A PermissionSetType element that specifies a code access security permission set.

defaultAssemblyRequest : A defaultAssemblyRequestType element that specifies the default code access security permission set requested by the deployment package (2).


<xs:complexType name="applicationRequestMinimumType"> <xs:sequence> <xs:element name="PermissionSet" type="asm.v2:PermissionSetType"/> <xs:element name="defaultAssemblyRequest" type="asm.v2:defaultAssemblyRequestType"/> </xs:sequence></xs:complexType>

2.2.2.3.14 PermissionSetTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: applicationRequestMinimumType

The PermissionSetType complex type specifies a code access security permission set.

Attributes:

ID : An ID ([W3C-XSD] section 3.3.8) attribute that specifies the identifier. MUST be "Custom".

Unrestricted : A boolean ([W3C-XSD] section 3.2.2) attribute that specifies the code access security permission set has no restrictions.

SameSite : A string ([W3C-XSD] section 3.2.1) attribute that specifies ignored data.

36 / 113










<xs:complexType name="PermissionSetType"> <xs:attribute name="ID" type="xs:ID" use="required"/> <xs:attribute name="Unrestricted" type="xs:boolean" use="required" fixed="true"/> <xs:attribute name="SameSite" type="xs:string" use="required" fixed="site"/></xs:complexType>

2.2.2.3.15 defaultAssemblyRequestTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: applicationRequestMinimumType

The defaultAssemblyRequestType complex type specifies a default code access security permission set requested by a deployment package (2).

Attributes:

permissionSetReference : An IDREF ([W3C-XSD] section 3.3.9) attribute that specifies a default set of permissions. MUST be "Custom".


<xs:complexType name="defaultAssemblyRequestType"> <xs:attribute name="permissionSetReference" type="xs:IDREF"/></xs:complexType>

2.2.2.3.16 fileTypeTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: file

The fileType complex type specifies a package file.

Child Elements:

hash : A hashType element that specifies the hash of the file.

Attributes:

name : A (string [W3C-XSD] section 3.2.1) attribute that specifies the name.

size : An (unsignedLong [W3C-XSD] section 3.3.21) attribute that specifies the file size in bytes.


<xs:complexType name="fileType"> <xs:choice minOccurs="0" maxOccurs="unbounded"> <xs:element name="hash" type="asm.v2:hashType"/> </xs:choice> <xs:attribute name="name" type="xs:string" use="required"/>

37 / 113










<xs:attribute name="size" type="xs:unsignedLong" use="required"/></xs:complexType>


2.2.2.4.1 TwoByteVersionTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: osType

The TwoByteVersion simple type specifies a version.


<xs:simpleType name="TwoByteVersion"> <xs:restriction base="xs:integer"> <xs:minInclusive value="0"/> <xs:maxInclusive value="65535"/> </xs:restriction></xs:simpleType>

2.2.2.4.2 OneByteVersionTarget namespace: urn:schemas-microsoft-com:asm.v2

Referenced by: osType

The OneByteVersion simple type specifies a version.


<xs:simpleType name="OneByteVersion"> <xs:restriction base="xs:integer"> <xs:minInclusive value="0"/> <xs:maxInclusive value="255"/> </xs:restriction></xs:simpleType>

2.2.2.4.3 dependencyTypeTypeTarget namespace: urn:schemas-microsoft-com:asm.v2


The dependencyTypeType simple type specifies the type of a dependency.

Value Meaning

preRequisite Specifies that the assembly is not a part of the deployment package (2).

install Specifies that the assembly is a part of the deployment package (2).

38 / 113







<xs:simpleType name="dependencyTypeType"> <xs:restriction base="xs:string"> <xs:enumeration value="preRequisite"/> <xs:enumeration value="install"/> </xs:restriction></xs:simpleType>








The fourPartVersionType simple type specifies a version.





39 / 113







The publicKeyTokenType simple type specifies the last 8 bytes of the SHA-1 hash as specified by [FIPS180-4] section 6.1 of a public key in accordance with section 2.5.2.1.





2.2.3.1.1 asmv3Target namespace: urn:schemas-microsoft-com:asm.v3

An asmv3Type element that specifies a global element that is referenced by trustInfoType, securityType.


<xs:element name="asmv3" type="asm.v3:asmv3Type"/>



2.2.3.3.1 requestedPrivilegesTypeTarget namespace: urn:schemas-microsoft-com:asm.v3

The RequestedPrivilegesType complex type specifies a reserved value.

Child Elements:

requestedExecutionLevel : A requestedExecutionLevelType element that specifies a reserved value.


<xs:complexType name="requestedPrivilegesType"> <xs:sequence> <xs:element name="requestedExecutionLevel" type="asm.v3:requestedExecutionLevelType"/> </xs:sequence></xs:complexType>

40 / 113








2.2.3.3.2 requestedExecutionLevelTypeTarget namespace: urn:schemas-microsoft-com:asm.v3

Referenced by: requestedPrivilegesType

The requestedExecutionLevelType complex type specifies a reserved value.

Attributes:

level : A string ([W3C-XSD] section 3.2.1) attribute that specifies a reserved value.


<xs:complexType name="requestedExecutionLevelType"> <xs:attribute name="level" type="xs:string" use="required" fixed="asInvoker"/></xs:complexType>

2.2.3.3.3 asmv3TypeTarget namespace: urn:schemas-microsoft-com:asm.v3

Referenced by: asmv3

The asmv3Type complex type specifies ignored data.


<xs:complexType name="asmv3Type"> <xs:sequence> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##any" processContents="skip"/> </xs:sequence></xs:complexType>

2.2.3.4 Simple TypesNone.

2.2.4 Target namespace: urn:schemas-microsoft-com:clickonce.v1


2.2.4.1.1 customHostSpecifiedTarget namespace: urn:schemas-microsoft-com:clickonce.v1

A customHostSpecifiedType element that specifies a global element that is referenced by entryPointType.


41 / 113








<xs:element name="customHostSpecified" type="co.v1:customHostSpecifiedType"/>



2.2.4.3.1 customHostSpecifiedTypeTarget namespace: urn:schemas-microsoft-com:clickonce.v1

Referenced by: customHostSpecified

The customHostSpecifiedType element specifies that entry points are defined in an addInType element.


<xs:complexType name="customHostSpecifiedType"/>


2.2.5 Target namespace: urn:schemas-microsoft-com:vsta.v3


2.2.5.1.1 addInTarget namespace: urn:schemas-microsoft-com:vsta.v3

An addInType element that specifies a global element that is referenced by assemblyType.


<xs:element name="addIn" type="vsta.v3:addInType"/>



2.2.5.3.1 addInTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3

Referenced by: addIn

42 / 113






The addInType complex type specifies run-time behavior of the deployment package (2).

Child Elements:

entryPointsCollection : An entryPointsCollectionType element that specifies the container for entryPointsType elements.

update : An updateType element that specifies the update behavior for the deployment package (2).

postActions : A postActionsType element that contains the list of postActionType elements.

application : An applicationType element that contains a customizationsType element.


<xs:complexType name="addInType"> <xs:sequence> <xs:element name="entryPointsCollection" type="vsta.v3:entryPointsCollectionType" minOccurs="1" maxOccurs="1"/> <xs:element name="update" type="vsta.v3:updateType" maxOccurs="1" minOccurs="1"/> <xs:element name="postActions" type="vsta.v3:postActionsType" maxOccurs="1" minOccurs="0"/> <xs:element name="application" type="vsta.v3:applicationType" maxOccurs="1" minOccurs="0"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.5.3.2 entryPointsCollectionTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3

Referenced by: addInType

The entryPointsCollectionType complex type specifies a container for entryPointsType elements.

Child Elements:

entryPoints : An entryPointsType element that specifies a list of entryPointType elements.


<xs:complexType name="entryPointsCollectionType"> <xs:sequence> <xs:element name="entryPoints" type="vsta.v3:entryPointsType" minOccurs="1" maxOccurs="unbounded"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

43 / 113






2.2.5.3.3 entryPointsTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3

Referenced by: entryPointsCollectionType

An entryPointsType specifies a list of entry points for a customization.

Child Elements:

entryPoint : An entryPointType element that specifies an entry point for the customization.

Attributes:

id : A string ([W3C-XSD] section 3.2.1) attribute that specifies the identifier of the customization. MUST be present when the structure contains more than one customizationType element. MUST match the id attribute value of a customizationType element that implements the entry points.


<xs:complexType name="entryPointsType"> <xs:sequence> <xs:element name="entryPoint" type="vsta.v3:entryPointType" maxOccurs="unbounded"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:attribute name="id" type="xs:string" use="optional"/> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.5.3.4 entryPointTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3

Referenced by: entryPointsType

The entryPointType complex type specifies an entry point for a customization.

Child Elements:

assemblyIdentity : An assemblyIdentity element that specifies the identity of the assembly that implements the entry point for the customization.

Attributes:

class : A string ([W3C-XSD] section 3.2.1) attribute that specifies the entry point. MUST be a fully qualified class name.


<xs:complexType name="entryPointType" mixed="true"> <xs:sequence minOccurs="1" maxOccurs="1"> <xs:element ref="asm.v2:assemblyIdentity"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:attribute name="class" type="xs:string" use="required"/>

44 / 113








<xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.5.3.5 postActionEntryPointTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3

Referenced by: postActionType

The postActionEntryPointType complex type specifies an entry point for a deployment package (2) post-deployment action.

Child Elements:

assemblyIdentity : A assemblyIdentity element that specifies the identity of the assembly that implements the post-deployment action entry point for the deployment package (2).

Attributes:

class : A string [W3C-XSD] section 3.2.1 attribute that specifies an entry point class. MUST be a fully qualified class name.


<xs:complexType name="postActionEntryPointType" mixed="true"> <xs:sequence minOccurs="1" maxOccurs="1"> <xs:element ref="asm.v2:assemblyIdentity"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:attribute name="class" type="xs:string" use="required"/> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.5.3.6 updateTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3


The updateType complex type specifies an update behavior for a deployment package (2).

Attributes:

enabled : A boolean ([W3C-XSD] section 3.2.2) attribute that specifies automatic checks for updates.


<xs:complexType name="updateType"> <xs:sequence> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:attribute name="enabled" type="xs:boolean" use="required" fixed="false"/>

45 / 113








<xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.5.3.7 postActionsTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3


The postActionsType type specifies a list of post-deployment actions for the deployment package (2).

Child Elements:

postAction : A postActionType element that specifies a post-deployment action.


<xs:complexType name="postActionsType"> <xs:sequence> <xs:element name="postAction" type="vsta.v3:postActionType" maxOccurs="unbounded" minOccurs="0"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.5.3.8 postActionTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3

Referenced by: postActionsType

The postActionType complex type specifies a post-deployment action.

Child Elements:

entryPoint : A postActionEntryPointType (section 2.2.5.3.5) element that specifies the entry point for the post-deployment action.

postActionData : A postActionDataType element that specifies the input data for the post-deployment action.


<xs:complexType name="postActionType"> <xs:sequence> <xs:element name="entryPoint" type="vsta.v3:postActionEntryPointType" maxOccurs="1" minOccurs="1"/> <xs:element name="postActionData" type="vsta.v3:postActionDataType" maxOccurs="1" minOccurs="0"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip"/>

46 / 113






</xs:complexType>

2.2.5.3.9 postActionDataTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3

Referenced by: postActionType

The postActionDataType complex type specifies input data for the post-deployment action.


<xs:complexType name="postActionDataType"> <xs:sequence> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.5.3.10 applicationTypeTarget namespace: urn:schemas-microsoft-com:vsta.v3


The applicationType complex type specifies a container for a customizationsType element.

Child Elements:

customizations : A customizations element that specifies a list of customizations in the deployment package (2).


<xs:complexType name="applicationType"> <xs:sequence> <xs:element ref="vsto.v4:customizations"/> </xs:sequence></xs:complexType>


2.2.6 Target namespace: urn:schemas-microsoft-com:vsto.v4


2.2.6.1.1 customizationsTarget namespace: urn:schemas-microsoft-com:vsto.v4

47 / 113






A customizationsType element that specifies a global element that is referenced by applicationType.


<xs:element name="customizations" type="vsto.v4:customizationsType"/>



2.2.6.3.1 customizationsTypeTarget namespace: urn:schemas-microsoft-com:vsto.v4

Referenced by: customizations

Contains a list of customizationType elements.

Child Elements:

customization : A customizationType element that specifies the customization.


<xs:complexType name="customizationsType"> <xs:sequence> <xs:element name="customization" type="vsto.v4:customizationType" minOccurs="1" maxOccurs="unbounded"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.6.3.2 customizationTypeTarget namespace: urn:schemas-microsoft-com:vsto.v4

Referenced by: customizationsType

Specifies a customization.

Child Elements:

appAddIn : An appAddInType element that specifies the customization is an add-in.

Attributes:

id : A string ([W3C-XSD] section 3.2.1) attribute that specifies the identifier of the customization. MUST be unique within the scope of the parent customizationsType element. MUST be present when the structure contains more than one customizationType element.

48 / 113








<xs:complexType name="customizationType"> <xs:sequence> <xs:choice minOccurs="1" maxOccurs="1"> <xs:element name="appAddIn" type="vsto.v4:appAddInType"/> </xs:choice> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:attribute name="id" type="xs:string" use="optional"/> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

2.2.6.3.3 appAddInTypeTarget namespace: urn:schemas-microsoft-com:vsto.v4

Referenced by: customizationType

Specifies the installation values of an add-in.

Child Elements:

friendlyName : A string ([W3C-XSD] section 3.2.1) element that specifies the user-displayable name. The length of the string value MUST be less than 261 characters.

description : A string ([W3C-XSD] section 3.2.1) element that specifies the user-displayable description. The length of the string value MUST be less than 32,768 characters.

Attributes:

application : A string ([W3C-XSD] section 3.2.1) attribute that specifies the customized application.

loadBehavior : A loadBehaviorType attribute that specifies the initial startup setting of the add-in.

keyName : A keyStringType attribute that specifies the name for storing and retrieving the installation values post installation. The length of the string value MUST be less than 215 characters. The length of the string value MUST be greater than zero characters.


<xs:complexType name="appAddInType"> <xs:sequence> <xs:element name="friendlyName" type="xs:string" maxOccurs="1" minOccurs="1"/> <xs:element name="description" type="xs:string" maxOccurs="1" minOccurs="0"/> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip"/> </xs:sequence> <xs:attribute name="application" type="xs:string" use="required" fixed="Outlook"/> <xs:attribute name="loadBehavior" type="vsto.v4:loadBehaviorType" use="optional"/> <xs:attribute name="keyName" type="vsto.v4:keyStringType" use="required"/> <xs:anyAttribute namespace="##other" processContents="skip"/></xs:complexType>

49 / 113










2.2.6.4.1 loadBehaviorTypeTarget namespace: urn:schemas-microsoft-com:vsto.v4

Referenced by: appAddInType

Specifies the initial startup setting of an add-in.

Value Meaning

2 Specifies that the add-in is disabled.

3 Specifies that the add-in is configured to run on startup of the customized application.


<xs:simpleType name="loadBehaviorType"> <xs:restriction base="xs:int"> <xs:enumeration value="2"/> <xs:enumeration value="3"/> </xs:restriction></xs:simpleType>

2.2.6.4.2 keyStringTypeTarget namespace: urn:schemas-microsoft-com:vsto.v4

Referenced by: appAddInType

The keyStringType simple type specifies a string for a key name.


<xs:simpleType name="keyStringType"> <xs:restriction base="xs:string"> <xs:pattern value="(\u0020|\u0021|[\u0023-\u0029]|[\u002B-\u0039]|\u003B|\u003D|[\u0040-\u005B]|[\u005D-\u007B]|[\u007D-\uD7FF]|[\uE000-\uFFFD]|[\u10000-\u10FFFF])*"/> </xs:restriction></xs:simpleType>

2.3 Strong Name SignatureA strong name signature is a method to uniquely identify a manifest by using public key cryptography. The manifest MUST have the following criteria:

The manifest file MUST be signed as specified in this section.

The public key used to verify the strong name signature MUST be the same as the key used to generate the publicKeyToken attribute on the assemblyIdentity element (section 2.1.1.3.1 and section 2.2.1.3.1) in accordance with section 2.5.2.1.

50 / 113






This section describes the profile of the XML Digital Signatures standard [XMLDSig] used by manifest signatures (section 2.1.1.3.3 and section 2.2.1.3.2).

2.3.1 Target namespace: http://www.w3.org/2000/09/xmldsig#


2.3.1.1.1 SignatureTarget namespace: http://www.w3.org/2000/09/xmldsig#

A SignatureType element that is specified as a global element in [XMLDSig]. This Signature element is referenced by assemblyType (section 2.1.1.3.3 and section 2.2.1.3.2).

The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment specifies the contents of this element.

<element name="Signature" type="ds:SignatureType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.2 SignatureValueTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType

A SignatureValueType element that is specified as a global element in [XMLDSig]. This SignatureValue element is referenced by SignatureType.


<element name="SignatureValue" type="ds:SignatureValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.3 SignedInfoTarget namespace: http://www.w3.org/2000/09/xmldsig#


A SignedInfoType element that is specified as a global element in [XMLDSig]. This SignedInfoType element is referenced by SignatureType.


<element name="SignedInfo" type="ds:SignedInfoType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.4 CanonicalizationMethodTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignedInfoType

51 / 113











A CanonicalizationMethodType element that is specified as a global element in [XMLDSig]. This CanonicalizationMethod element is referenced by SignedInfoType.


<element name="CanonicalizationMethod" type="ds:CanonicalizationMethodType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.5 SignatureMethodTarget namespace: http://www.w3.org/2000/09/xmldsig#


A SignatureMethodType element that is specified as a global element in [XMLDSig]. This SignatureMethod element is referenced by SignedInfoType.


<element name="SignatureMethod" type="ds:SignatureMethodType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.6 ReferenceTarget namespace: http://www.w3.org/2000/09/xmldsig#


A ReferenceType element that is specified as a global element in [XMLDSig]. This Reference element is referenced by SignedInfoType.


<element name="Reference" type="ds:ReferenceType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.7 TransformsTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: ReferenceType

A TransformsType element that is specified as a global element in [XMLDSig]. This Transforms element is referenced by ReferenceType.


<element name="Transforms" type="ds:TransformsType" xmlns="http://www.w3.org/2001/XMLSchema"/>

52 / 113












2.3.1.1.8 TransformTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: TransformsType

A TransformType element that is specified as a global element in [XMLDSig]. This Transform element is referenced by TransformsType.


<element name="Transform" type="ds:TransformType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.9 DigestMethodTarget namespace: http://www.w3.org/2000/09/xmldsig#


A DigestMethodType element that is specified as a global element in [XMLDSig]. This DigestMethod element is referenced by ReferenceType.


<element name="DigestMethod" type="ds:DigestMethodType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.10 DigestValueTarget namespace: http://www.w3.org/2000/09/xmldsig#


A DigestValueType element that is specified as a global element in [XMLDSig]. This DigestValue element is referenced by ReferenceType.


<element name="DigestValue" type="ds:DigestValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.11 KeyInfoTarget namespace: http://www.w3.org/2000/09/xmldsig#


A KeyInfoType element that is specified as a global element in [XMLDSig]. This KeyInfo element is referenced by SignatureType.


53 / 113












<element name="KeyInfo" type="ds:KeyInfoType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.12 KeyValueTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyInfoType

A KeyValueType element that is specified as a global element in [XMLDSig]. This KeyValue element is referenced by KeyInfoType.


<element name="KeyValue" type="ds:KeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.3.1.1.13 RSAKeyValueTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyValueType

A RSAKeyValueType element that is specified as a global element in [XMLDSig]. This RSAKeyValue element is referenced by KeyValueType.


<element name="RSAKeyValue" type="ds:RSAKeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>



2.3.1.3.1 SignatureTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: Signature

SignatureType specifies the information that is necessary to verify the integrity of a digital signature (2).

Child Elements:

ds:SignedInfo : A SignedInfoType element that specifies the information necessary to compute the hash of the manifest.

ds:SignatureValue : A SignatureValueType element that specifies the encoded value of the signature.

54 / 113








ds:KeyInfo : A KeyInfoType element that specifies the public key to be used to verify the signature.

Attributes:

Id : An ID ([W3C-XSD] section 3.3.8) attribute. The value of the Id attribute MUST be "StrongNameSignature".

The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment specifies the contents of this complex type.

<complexType name="SignatureType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:SignedInfo"/> <element ref="ds:SignatureValue"/> <element ref="ds:KeyInfo"/> </sequence> <attribute name="Id" type="ID" use="optional"/></complexType>

2.3.1.3.2 SignatureValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType, SignatureValue

The SignatureValueType complex type specifies the encoded value of the signature. The content of the SignatureValueType is defined in section 4.2 of [XMLDSig]. All attributes of SignatureValueType are optional and are ignored.


<complexType name="SignatureValueType" xmlns="http://www.w3.org/2001/XMLSchema"> <simpleContent> <extension base="base64Binary"/> </simpleContent></complexType>

2.3.1.3.3 SignedInfoTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType, SignedInfo

The SignedInfoType complex type specifies the information necessary to compute the hash of the manifest. The content of the SignedInfoType is defined in section 4.3 of [XMLDSig].

Child Elements:

ds:CanonicalizationMethod : A CanonicalizationMethodType element that specifies the canonicalization algorithm to be applied when the digital signature (2) is verified.

ds:SignatureMethod : A SignatureMethodType element that specifies the digital signature (2) algorithm to be used when the digital signature (2) is verified.

ds:Reference : A ReferenceType element that specifies the XML node-set to be verified.

55 / 113










<complexType name="SignedInfoType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:CanonicalizationMethod"/> <element ref="ds:SignatureMethod"/> <element ref="ds:Reference"/> </sequence></complexType>

2.3.1.3.4 CanonicalizationMethodTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignedInfoType, CanonicalizationMethod

The CanonicalizationMethodType complex type specifies the canonicalization algorithm that is applied to the SignedInfo element prior to computing the hash. The content of the CanonicalizationMethodType is defined in section 4.3.1 of [XMLDSig].

All child elements of CanonicalizationMethodType are optional and ignored.

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the canonicalization algorithm. The canonicalization algorithm MUST be Exclusive XML CanonicalizationVersion 1.0 ([Excl-C14N]). The value of the Algorithm attribute MUST be "http://www.w3.org/2001/10/xml-exc-c14n#".


<complexType name="CanonicalizationMethodType" xmlns="http://www.w3.org/2001/XMLSchema"> <attribute name="Algorithm" type="anyURI" use="required"/></complexType>

2.3.1.3.5 SignatureMethodTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignedInfoType, SignatureMethod

The SignatureMethodType complex type specifies the information necessary to compute the hash of the manifest. The content of the SignatureMethodType is defined in section 4.3.2 of [XMLDSig].

All child elements of SignatureMethodType are optional and are ignored.

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the digital signature (2) algorithm. The digital signature (2) algorithm MUST be RSA with SHA-1 ([XMLDSig] section 6.4.2). The value of the Algorithm attribute MUST be "http://www.w3.org/2000/09/xmldsig#rsa-sha1".


56 / 113














<complexType name="SignatureMethodType" xmlns="http://www.w3.org/2001/XMLSchema"> <attribute name="Algorithm" type="anyURI" use="required"/></complexType>

2.3.1.3.6 ReferenceTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignedInfoType, Reference

The ReferenceType complex type specifies the information necessary to compute the digest of the manifest. The content of the ReferenceType is defined in section 4.3.3 of [XMLDSig].

Child Elements:

ds:Transforms : A TransformsType element that specifies the transforms to be applied to the manifest when verifying the digital signature (2).

ds:DigestMethod : A DigestMethodType element that specifies the hashing algorithm to be applied to the manifest when the digital signature (2) is verified.

ds:DigestValue : A DigestValueType element that specifies the encoded value of the digest.

Attributes:

URI : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the node-set that contains the signature. The value of the URI attribute MUST be an empty string.


<complexType name="ReferenceType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:Transforms"/> <element ref="ds:DigestMethod"/> <element ref="ds:DigestValue"/> </sequence> <attribute name="URI" type="anyURI" use="required"/></complexType>

2.3.1.3.7 TransformsTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: ReferenceType, Transforms

The TransformsType complex type specifies the information to describe how the signer obtained the data object that was digested. The content of the TransformsType is defined in section 4.3.3.4 of [XMLDSig].

Child Elements:

ds:Transform : A TransformType element that specifies the Enveloped Signature Transform ([XMLDSig] section 6.6.4). The value of the Algorithm attribute MUST be "http://www.w3.org/2000/09/xmldsig#enveloped-signature".

57 / 113









ds:Transform : A TransformType element that specifies the Exclusive XML CanonicalizationVersion 1.0 ([Excl-C14N]). The value of the Algorithm attribute MUST be "http://www.w3.org/2001/10/xml-exc-c14n#".


<complexType name="TransformsType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:Transform" maxOccurs="unbounded"/> </sequence></complexType>

2.3.1.3.8 TransformTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: TransformsType, Transform

The TransformType complex type specifies the information to describe how the signer obtained the data object that was digested. The content of the TransformType is defined in section 4.3.3.4 of [XMLDSig].

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies a transform algorithm.


<complexType name="TransformType" mixed="true" xmlns="http://www.w3.org/2001/XMLSchema"> <attribute name="Algorithm" type="anyURI" use="required"/></complexType>

2.3.1.3.9 DigestMethodTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: ReferenceType, DigestMethod

The DigestMethodType complex type specifies the digest algorithm to be applied to the manifest when the digital signature (2) is verified. The content of the DigestMethodType is defined in section 4.3.3.5 of [XMLDSig].

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the digest algorithm. The digest algorithm MUST be SHA-1 [FIPS180-4].The value of the Algorithm attribute MUST be "http://www.w3.org/2000/09/xmldsig#sha1" ([XMLDSig] section 6.2.1).


<complexType name="DigestMethodType" mixed="true" xmlns="http://www.w3.org/2001/XMLSchema"> <attribute name="Algorithm" type="anyURI" use="required"/>

58 / 113














</complexType>

2.3.1.3.10 KeyInfoTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType, KeyInfo

The KeyInfoType complex type specifies the information about the public key to be used to verify the signature. The content of the KeyInfoType is defined in section 4.4 of [XMLDSig].

Child Elements:

ds:KeyValue : A KeyValueType element that contains the public key to be used to verify the signature.

msrel:RelData : A RelDataType element that specifies information about the software publisher. This element MUST be present.

Attributes:

Id : An ID ([W3C-XSD] section 3.2.1) attribute that identifies a KeyInfo element to contain information about a strong name public key. The value of Id attribute MUST be "StrongNameKeyInfo".


<complexType name="KeyInfoType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:KeyValue"/> <element ref="msrel:RelData"/> </sequence> <attribute name="Id" type="ID" use="optional"/></complexType>

2.3.1.3.11 KeyValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyInfoType, KeyValue

The KeyValueType complex type specifies the public key component of the key used to generate the strong name.

Child Elements:

ds:RSAKeyValue : A RSAKeyValueType element that specifies the modulus and exponent of an RSA public key ([RFC3447] section 3.1).


<complexType name="KeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:RSAKeyValue"/>

59 / 113









</sequence></complexType>

2.3.1.3.12 RSAKeyValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyValueType, RSAKeyValue

The RSAKeyValueType complex type specifies the modulus and exponent of an RSA public key ([RFC3447] section 3.1). The content of the RSAKeyValueType is defined in section 4.4.2.2 of [XMLDSig].

Child Elements:

Modulus : A CryptoBinary element that specifies the modulus of an RSA public key ([RFC3447] section 3.1).

Exponent : A CryptoBinary element that specifies the exponent of an RSA public key ([RFC3447] section 3.1).


<complexType name="RSAKeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element name="Modulus" type="ds:CryptoBinary"/> <element name="Exponent" type="ds:CryptoBinary"/> </sequence></complexType>


2.3.1.4.1 CryptoBinaryTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: RSAKeyValueType

The CryptoBinary simple type as specified in section 4.0.1 of [XMLDSig].

The following W3C XML Schema ([XMLSCHEMA1] section 2.1) fragment specifies the contents of this simple type.

<simpleType name="CryptoBinary" xmlns="http://www.w3.org/2001/XMLSchema"> <restriction base="base64Binary"/></simpleType>

2.3.1.4.2 DigestValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: ReferenceType, DigestValue

60 / 113











The DigestValueType simple type specifies the encoded value of the digest. The content of the DigestMethodType is defined in section 4.3.3.6 of [XMLDSig].


<simpleType name="DigestValueType" xmlns="http://www.w3.org/2001/XMLSchema"> <restriction base="base64Binary"/></simpleType>

2.3.2 Target namespace: http://schemas.microsoft.com/windows/rel/2005/reldata


2.3.2.1.1 RelDataTarget namespace: http://schemas.microsoft.com/windows/rel/2005/reldata

A RelDataType element that specifies a global element that is referenced by KeyInfoType.


<xs:element name="RelData" type="RelDataType"/>



2.3.2.3.1 RelDataTypeTarget namespace: http://schemas.microsoft.com/windows/rel/2005/reldata

Referenced by: RelData

The RelDataType complex type specifies a container for a Rights Expression Language [ISO/IEC-21000-5] license that describes a software publisher.

Child Elements:

r:license : A License element that specifies publisher expressed using the Rights Expression Language [ISO/IEC-21000-5].


<xs:complexType name="RelDataType"> <xs:sequence> <xs:element ref="r:license"/> </xs:sequence></xs:complexType>

61 / 113












2.4 Software Publisher Signature

2.4.1 Target namespace: urn:mpeg:mpeg21:2003:01-REL-R-NS


2.4.1.1.1 licenseTarget namespace: urn:mpeg:mpeg21:2003:01-REL-R-NS

A License element that specifies a global element that is referenced by RelDataType.


<xsd:element name="license" type="r:License"/>



2.4.1.3.1 LicenseTarget namespace: urn:mpeg:mpeg21:2003:01-REL-R-NS

Referenced by: license

The License complex type specifies a description of a software publisher expressed using the Rights Expression Language [ISO/IEC-21000-5].

All attributes of License are optional and are ignored.

Child Elements:

grant : A Grant element that specifies a manifest to have the right to be signed by a particular software publisher.

issuer : An Issuer element that specifies the XML digital signature ([XMLDSig]) of the software publisher.


<xsd:complexType name="License"> <xsd:sequence> <xsd:element name="grant" type="r:Grant"/> <xsd:element name="issuer" type="r:Issuer"/> </xsd:sequence></xsd:complexType>

62 / 113








2.4.1.3.2 GrantTarget namespace: urn:mpeg:mpeg21:2003:01-REL-R-NS

Referenced by: License

The Grant complex type specifies a container for description of a software publisher expressed using the Rights Expression Language [ISO/IEC-21000-5].

Child Elements:

as:ManifestInformation : A ManifestInformationType element that specifies a deployment manifest or an application manifest.

as:SignedBy : A SignedByType element that specifies the right for a manifest to be signed by a software publisher.

as:AuthenticodePublisher : An AuthenticodePublisherType element that specifies a software publisher.


<xsd:complexType name="Grant"> <xsd:sequence> <xsd:element ref="as:ManifestInformation"/> <xsd:element ref="as:SignedBy"/> <xsd:element ref="as:AuthenticodePublisher"/> </xsd:sequence></xsd:complexType>

2.4.1.3.3 IssuerTarget namespace: urn:mpeg:mpeg21:2003:01-REL-R-NS

Referenced by: License

The Issuer complex type specifies a container for a XML digital signature [XMLDSig].

All attributes of Issuer are optional and are ignored.

Child Elements:

dsig:Signature : A SignatureType element that specifies the necessary information to validate a signed deployment manifest or application manifest.


<xsd:complexType name="Issuer"> <xsd:sequence> <xsd:element ref="dsig:Signature"/> </xsd:sequence></xsd:complexType>

63 / 113








2.4.1.3.4 RightTarget namespace: urn:mpeg:mpeg21:2003:01-REL-R-NS

The Right complex type as specified in section 7.4.3 of [ISO/IEC-21000-5]. Right is a conceptually abstract type and is used by this specification only as a base type for SignedByType.


<xsd:complexType name="Right"/>


2.4.2 Target namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode


2.4.2.1.1 ManifestInformationTarget namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode

A ManifestInformationType element that specifies a global element that is referenced by Grant.


<xs:element name="ManifestInformation" type="ManifestInformationType"/>

2.4.2.1.2 SignedByTarget namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode

A SignedByType element that specifies a global element that is referenced by Grant.


<xs:element name="SignedBy" type="SignedByType"/>

2.4.2.1.3 AuthenticodePublisherTarget namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode

An AuthenticodePublisherType element specifies a global element that is referenced by Grant.


64 / 113









<xs:element name="AuthenticodePublisher" type="AuthenticodePublisherType"/>

2.4.2.1.4 TimestampTarget namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode

A CryptoBinary element that specifies a global element that is referenced by ObjectType.


<xs:element name="Timestamp" type="ds:CryptoBinary"/>



2.4.2.3.1 ManifestInformationTypeTarget namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode

Referenced by: ManifestInformation

The ManifestInformationType complex type specifies a deployment manifest or application manifest.

Child Elements:

assemblyIdentity : An assemblyIdentityType (section 2.1.1.3.1 and section 2.2.1.3.1) element that specifies either a deployment package (2) or an application manifest.

Attributes:

Hash : A CryptoBinary ([XMLDSig] section 4.0.1) attribute that specifies the hash of the manifest that the software publisher signed.

Description : A string ([W3C-XSD] section 3.2.1) attribute that specifies a short description of the deployment package (2).

Url : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies a Url that a user can visit to obtain more information about the deployment package (2) and or the software publisher.


<xs:complexType name="ManifestInformationType"> <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v1:assemblyIdentityType"/> </xs:sequence> <xs:attribute name="Hash" type="ds:CryptoBinary" use="required"/> <xs:attribute name="Description" type="xs:string" use="optional"/> <xs:attribute name="Url" type="xs:anyURI" use="optional"/></xs:complexType>

65 / 113









2.4.2.3.2 SignedByTypeTarget namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode

Referenced by: SignedBy

The SignedByType complex type specifies the right for a manifest to be signed by a software publisher.


<xs:complexType name="SignedByType"> <xs:complexContent> <xs:restriction base="r:Right"/> </xs:complexContent></xs:complexType>

2.4.2.3.3 AuthenticodePublisherTypeTarget namespace: http://schemas.microsoft.com/windows/pki/2005/Authenticode

Referenced by: AuthenticodePublisher

The AuthenticodePublisherType complex type specifies information about a software publisher.

Child Elements:

X509SubjectName : A string ([W3C-XSD] section 3.2.1) element that specifies the identity of a software publisher. The string is generated by converting the Subject distinguished name of the software publisher certificate.


<xs:complexType name="AuthenticodePublisherType"> <xs:sequence> <xs:element name="X509SubjectName" type="xs:string"/> </xs:sequence></xs:complexType>


2.4.3 Target namespace: http://www.w3.org/2000/09/xmldsig#


2.4.3.1.1 SignatureTarget namespace: http://www.w3.org/2000/09/xmldsig#

A SignatureType element that is specified as a global element in [XMLDSig]. This Signature element is referenced by Issuer.

66 / 113









<element name="Signature" type="ds:SignatureType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.2 SignatureValueTarget namespace: http://www.w3.org/2000/09/xmldsig#


A SignatureValueType that is specified as a global element in [XMLDSig]. This SignatureValue element is referenced by SignatureType.


<element name="SignatureValue" type="ds:SignatureValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.3 SignedInfoTarget namespace: http://www.w3.org/2000/09/xmldsig#


A SignedInfoType element that is specified as a global element in [XMLDSig]. This SignedInfo element is referenced by SignatureType.


<element name="SignedInfo" type="ds:SignedInfoType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.4 CanonicalizationMethodTarget namespace: http://www.w3.org/2000/09/xmldsig#


A CanonicalizationMethodType element that is specified as a global element in [XMLDSig]. This CanonicalizationMethod element is referenced by SignedInfoType.


<element name="CanonicalizationMethod" type="ds:CanonicalizationMethodType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.5 SignatureMethodTarget namespace: http://www.w3.org/2000/09/xmldsig#

67 / 113












A SignatureMethodType element that is specified as a global element in [XMLDSig]. This SignatureMethod element is referenced by SignedInfoType.


<element name="SignatureMethod" type="ds:SignatureMethodType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.6 ReferenceTarget namespace: http://www.w3.org/2000/09/xmldsig#


A ReferenceType element that is specified as a global element in [XMLDSig]. This Reference element is referenced by SignedInfoType.


<element name="Reference" type="ds:ReferenceType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.7 TransformsTarget namespace: http://www.w3.org/2000/09/xmldsig#


A TransformsType element that is specified as a global element in [XMLDSig]. This Transforms element is referenced by ReferenceType.


<element name="Transforms" type="ds:TransformsType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.8 TransformTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: TransformsType

A TransformType element that is specified as a global element in [XMLDSig]. This Transform element is referenced by TransformsType.


<element name="Transform" type="ds:TransformType" xmlns="http://www.w3.org/2001/XMLSchema"/>

68 / 113












2.4.3.1.9 DigestMethodTarget namespace: http://www.w3.org/2000/09/xmldsig#


A DigestMethodType element that is specified as a global element in [XMLDSig]. This DigestMethod element is referenced by ReferenceType.


<element name="DigestMethod" type="ds:DigestMethodType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.10 DigestValueTarget namespace: http://www.w3.org/2000/09/xmldsig#


A DigestValueType element that is specified as a global element in [XMLDSig]. This DigestValue element is referenced by ReferenceType.


<element name="DigestValue" type="ds:DigestValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.11 ObjectTarget namespace: http://www.w3.org/2000/09/xmldsig#


An ObjectType element that is specified as a global element in [XMLDSig]. This Object element is referenced by SignatureType.


<element name="Object" type="ds:ObjectType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.12 KeyInfoTarget namespace: http://www.w3.org/2000/09/xmldsig#


A KeyInfoType element that is specified as a global element in [XMLDSig]. This KeyInfo element is referenced by SignatureType.


69 / 113












<element name="KeyInfo" type="ds:KeyInfoType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.13 KeyValueTarget namespace: http://www.w3.org/2000/09/xmldsig#


A KeyValueType element that is specified as a global element in [XMLDSig]. This KeyValue element is referenced by KeyInfoType.


<element name="KeyValue" type="ds:KeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.14 X509DataTarget namespace: http://www.w3.org/2000/09/xmldsig#


A X509DataType element that is specified as a global element in [XMLDSig]. This X509Data element is referenced by KeyInfoType.


<element name="X509Data" type="ds:X509DataType" xmlns="http://www.w3.org/2001/XMLSchema"/>

2.4.3.1.15 RSAKeyValueTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyValueType

A RSAKeyValueType element that is specified as a global element in [XMLDSig]. This RSAKeyValue element is referenced by KeyValueType.


<element name="RSAKeyValue" type="ds:RSAKeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"/>


70 / 113











2.4.3.3.1 SignatureTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: Signature

The SignatureType complex type specifies the information that is necessary to verify the integrity of the digital signature (2). The content of the SignatureType is defined in section 4.1 of [XMLDSig].

Child Elements:

ds:SignedInfo : A SignedInfoType element that specifies the information necessary to compute the digest of the manifest.

ds:SignatureValue : A SignatureValueType element that specifies the encoded value of the signature.

ds:KeyInfo : A KeyInfoType element that specifies the information about the public key to be used to verify the signature.

ds:Object : An ObjectType element that specifies the timestamp information.

Other child elements of SignatureType are optional and are ignored.

Attributes:

Id : An ID ([W3C-XSD] section 3.3.8) attribute. The value of the Id attribute MUST be "AuthenticodeSignature".


<complexType name="SignatureType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:SignedInfo"/> <element ref="ds:SignatureValue"/> <element ref="ds:KeyInfo"/> <element ref="ds:Object" minOccurs="0"/> </sequence> <attribute name="Id" type="ID" use="optional"/></complexType>

2.4.3.3.2 SignatureValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType, SignatureValue

The SignatureValueType complex type specifies the encoded value of the signature. The content of the SignatureValueType is defined in section 4.2 of [XMLDSig].


<complexType name="SignatureValueType" xmlns="http://www.w3.org/2001/XMLSchema">

71 / 113









<simpleContent> <extension base="base64Binary"/> </simpleContent></complexType>

2.4.3.3.3 SignedInfoTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType, SignedInfo

The SignedInfoType complex type specifies the information necessary to compute the digest of the manifest. The content of the SignedInfoType is defined in section 4.3 of [XMLDSig].

Child Elements:

ds:CanonicalizationMethod : A CanonicalizationMethodType element that specifies the canonicalization algorithm to be applied to SignedInfo element when the digital signature (2) is verified.

ds:SignatureMethod : A SignatureMethodType element that specifies the digital signature (2) algorithm to be used when the digital signature (2) is verified.

ds:Reference : A ReferenceType element that specifies the XML node-set to be verified.


<complexType name="SignedInfoType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:CanonicalizationMethod"/> <element ref="ds:SignatureMethod"/> <element ref="ds:Reference"/> </sequence></complexType>

2.4.3.3.4 CanonicalizationMethodTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignedInfoType, CanonicalizationMethod

The CanonicalizationMethodType complex type specifies the canonicalization algorithm that is applied to the SignedInfo element prior to computing the digest.

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the canonicalization algorithm. The canonicalization algorithm MUST be Exclusive XML CanonicalizationVersion 1.0 ([Excl-C14N]). The value of the Algorithm attribute MUST be "http://www.w3.org/2001/10/xml-exc-c14n#"


<complexType name="CanonicalizationMethodType" xmlns="http://www.w3.org/2001/XMLSchema">

72 / 113










<attribute name="Algorithm" type="anyURI" use="required"/></complexType>

2.4.3.3.5 SignatureMethodTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignedInfoType, SignatureMethod

The SignatureMethodType complex type specifies the information necessary to compute the digest of the manifest. The content of the SignatureMethodType is defined in section 4.3.2 of [XMLDSig].

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the digital signature (2) algorithm. The digital signature (2) algorithm MUST be RSA with SHA-1 ([XMLDSig] section 6.4.2). The value of the Algorithm attribute MUST be "http://www.w3.org/2000/09/xmldsig#rsa-sha1".


<complexType name="SignatureMethodType" xmlns="http://www.w3.org/2001/XMLSchema"> <attribute name="Algorithm" type="anyURI" use="required"/></complexType>

2.4.3.3.6 ReferenceTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignedInfoType, Reference

The ReferenceType complex type specifies the information necessary to compute the digest of the manifest. The content of the ReferenceType is defined in section 4.3.3 of [XMLDSig].

Child Elements:

ds:Transforms : A TransformsType element that specifies the transforms to be applied to the manifest when verifying the digital signature (2).

ds:DigestMethod : A DigestMethodType element that specifies the digest algorithm to be applied to the manifest when the digital signature (2) is verified.

ds:DigestValue : A DigestValueType element that specifies the encoded value of the digest.

Attributes:

URI : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the node-set that contains the signature. The value of the URI attribute MUST be an empty string.


<complexType name="ReferenceType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence>

73 / 113











<element ref="ds:Transforms"/> <element ref="ds:DigestMethod"/> <element ref="ds:DigestValue"/> </sequence> <attribute name="URI" type="anyURI" use="required"/></complexType>

2.4.3.3.7 TransformsTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: ReferenceType, Transforms

The TransformsType complex type specifies the information to describe how the signer obtained the data that was digested. The content of the TransformsType is defined in section 4.3.3.4 of [XMLDSig].

Child Elements:

ds:Transform : A TransformType element that specifies the Enveloped Signature Transform ([XMLDSig] section 6.6.4). The value of the Algorithm attribute MUST be "http://www.w3.org/2000/09/xmldsig#enveloped-signature".

ds:Transform : A TransformType element that specifies the Exclusive XML CanonicalizationVersion 1.0 ([Excl-C14N]). The value of the Algorithm attribute MUST be "http://www.w3.org/2001/10/xml-exc-c14n#".


<complexType name="TransformsType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:Transform" maxOccurs="unbounded"/> </sequence></complexType>

2.4.3.3.8 TransformTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: TransformsType, Transform

The TransformType complex type specifies the information to describe how the signer obtained the data object that was digested. The content of the TransformType is defined in section 4.3.3.4 of [XMLDSig].

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies a transform algorithm.


<complexType name="TransformType" mixed="true" xmlns="http://www.w3.org/2001/XMLSchema"> <attribute name="Algorithm" type="anyURI" use="required"/>

74 / 113











</complexType>

2.4.3.3.9 DigestMethodTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: ReferenceType, DigestMethod

The DigestMethodType complex type specifies the digest algorithm to be applied to the manifest when the digital signature (2) is verified. The content of the DigestMethodType is defined in section 4.3.3.5 of [XMLDSig].

Attributes:

Algorithm : An anyURI ([W3C-XSD] section 3.2.17) attribute that specifies the digest algorithm. The digest algorithm MUST be SHA-1 [FIPS180-4]. The value of the Algorithm attribute MUST be "http://www.w3.org/2000/09/xmldsig#sha1" ([XMLDSig] section 6.2.1).


<complexType name="DigestMethodType" mixed="true" xmlns="http://www.w3.org/2001/XMLSchema"> <attribute name="Algorithm" type="anyURI" use="required"/></complexType>

2.4.3.3.10 ObjectTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType, Object

The ObjectType complex type as specified in section 4.5 of [XMLDSig].

Child Elements:

as:Timestamp : A CryptoBinary element that specifies a base 64 encoded [RFC2045] timestamp that SHOULD be signed by a time stamp authority. The timestamp is formatted as a PKCS#7 SignedData ([RFC2315] section 9.1) according to the following restrictions:

The version field MUST be 1.

The digestAlgorithms field MUST contain at least one object identifier (OID) ([ITUX680]) for either MD5 (1.2.840.113549.2.5) [RFC1321] or SHA-1 (1.3.14.3.2.26) [RFC3279].

The contentInfo field MUST consists of the following:

The contentType field MUST be the OID 1.2.840.113549.1.7.1.

The content field MUST contain the signature value of the software publisher signature (for example, the content of the SignatureValueType that is not encoded using base64 [RFC2045]).

The certificates field contains the certificate chain of the time stamp authority.

The crls field is not used and MUST be null.

The signerInfos field MUST contain one signerInfo ([RFC2315] section 9.2).

75 / 113

















The digestEncryptionAlgorithm field MUST contain one of the following OIDs:

RSA-MD5 (1.2.840.113549.1.1.4)

RSA-SHA-1 (1.2.840.113549.1.1.5)

DSA-SHA-1 (1.2.840.10040.4.3)?

The unauthenticatedAttributes field MUST contain the following attributes:

ContentType ([PKCS9] section 6.3): The attribute’s value MUST be set to PKCS #7 Data ([RFC2315] section 8).

SigningTime ([PKCS9] section 6.5): The value MUST be set as specified by [PKCS9] section 6.5.

messageDigest ([PKCS9] section 6.4): The value MUST be set as specified by [PKCS9] section 6.6.


<complexType name="ObjectType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="as:Timestamp"/> </sequence></complexType>

2.4.3.3.11 KeyInfoTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: SignatureType, KeyInfo

The KeyInfoType complex type specifies the information about the public key to be used to verify the signature. The content of the KeyInfoType is defined in section 4.4 of [XMLDSig].

Child Elements:

ds:KeyValue : A KeyValueType element that contains the public key to be used to verify the signature.

ds:X509Data : A X509DataType element that specifies the digital certificate chain ([RFC3280]) of the software publisher.

Attributes:

Id : A string ([W3C-XSD] section 3.2.1) attribute that identifies a KeyInfo element. The Id attribute is optional and ignored.


<complexType name="KeyInfoType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:KeyValue"/> <element ref="ds:X509Data"/>

76 / 113















</sequence> <attribute name="Id" type="ID" use="optional"/></complexType>

2.4.3.3.12 KeyValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyInfoType, KeyValue

The KeyValueType complex type specifies the information about the public key component of the key used to generate the strong name. The content of the KeyValueType is defined in section 4.4.2 of [XMLDSig].

Child Elements:

ds:RSAKeyValue : A RSAKeyValueType element that specifies the modulus and exponent of an RSA public key ([RFC3447] section 3.1).


<complexType name="KeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element ref="ds:RSAKeyValue"/> </sequence></complexType>

2.4.3.3.13 X509DataTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyInfoType, X509Data

The X509DataType complex type specifies one or more digital certificates of the software publisher and the issuing certification authority (CA) (1). Each digital certificate in the digital certificate chain is encoded in a separate X509Certificate child element. The content of the X509DataType is defined in section 4.4.4 of [XMLDSig].

Child Elements:

X509Certificate : A base64Binary ([W3C-XSD] section 3.2.16) element that specifies a base64 [RFC2045] encoded X.509 digital certificate [RFC3280].


<complexType name="X509DataType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence maxOccurs="unbounded"> <element name="X509Certificate" type="base64Binary"/> </sequence></complexType>

77 / 113












2.4.3.3.14 RSAKeyValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: KeyValueType, RSAKeyValue

The RSAKeyValueType complex type specifies the information about the modulus and exponent of an RSA public key ([RFC3447] section 3.1). The content of the RSAKeyValueType is defined in section 4.4.2.2 of [XMLDSig].

Child Elements:

Modulus : A CryptoBinary element that specifies the modulus of an RSA public key ([RFC3447] section 3.1).

Exponent : A CryptoBinary element that specifies the exponent of an RSA public key ([RFC3447] section 3.1).


<complexType name="RSAKeyValueType" xmlns="http://www.w3.org/2001/XMLSchema"> <sequence> <element name="Modulus" type="ds:CryptoBinary"/> <element name="Exponent" type="ds:CryptoBinary"/> </sequence></complexType>


2.4.3.4.1 CryptoBinaryTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: RSAKeyValueType, ObjectType

The CryptoBinary simple type as specified in [XMLDSig] section 4.0.1.


<simpleType name="CryptoBinary" xmlns="http://www.w3.org/2001/XMLSchema"> <restriction base="base64Binary"/></simpleType>

2.4.3.4.2 DigestValueTypeTarget namespace: http://www.w3.org/2000/09/xmldsig#

Referenced by: ReferenceType, DigestValue

The DigestValueType simple type specifies the encoded value of the digest. The content of the DigestMethodType is defined in section 4.3.3.6 of [XMLDSig].


78 / 113













<simpleType name="DigestValueType" xmlns="http://www.w3.org/2001/XMLSchema"> <restriction base="base64Binary"/></simpleType>

2.5 AlgorithmsThis section specifies algorithms used by section 2.1, section 2.2, section 2.3 and section 2.4.

2.5.1 HashTransforms.IdentityThe HashTransforms.Identity algorithm is a transform algorithm as specified by [XMLDSig] section 6.6. The identifier for the algorithm is "urn:schemas-microsoft-com:HashTransforms.Identity". The algorithm has a single implicit parameter that is a byte stream. The output of this transform is a byte stream whose contents are exactly the same as the input byte stream.

2.5.2 Verification of Strong Name SignatureThe strong name signature MUST be verified in accordance to the following criteria:

The manifest signature MUST be verified according to section 3.2 of [XMLDSig] and the profile of [XMLDSig] specified in section 2.3.1, using the RSA public key ([RFC3447] section 3.1) included in the RSAKeyValueType.

The value of the publicKeyToken attribute in the assemblyIdentity element (section 2.1.1.3.1 and section 2.2.1.3.1) MUST be equal to the public key used in the previous step, after the public key has been converted from the RSAKeyValueType format into the hexBinary ([W3C-XSD] section 3.2.15) representation in accordance with section 2.5.2.1.

The publisherIdentity element (section 2.1.2.3.6 and section 2.2.2.3.9) MUST be present:

A software publisher signature (section 2.4) MUST be present:

The RelData element MUST be present.

The RelData element MUST contain a license element.

The string representation (section 2.5.3.4) of the Subject name ([RFC3280] section 4.1.2.6) in the software publisher certificate MUST be identical with the value of the X509SubjectName element (section 2.4.2.3.3), as well as the value of the name attribute of the publisherIdentity element (section 2.1.2.3.6 and section 2.2.2.3.9).

The SHA-1 hash ([FIPS180-4] section 6.1) of the public key of the certification authority (CA) (1) that issued the software publisher certificate MUST be identical to the value of the issuerKeyHash attribute on the publisherIdentity element (section 2.1.2.3.6 and section 2.2.2.3.9).

2.5.2.1 Conversion from RSA Public Key to publicKeyToken1. Convert the RSA public key ([RFC3447] section 3.1) into the CryptoAPI PUBLICKEYBLOB format

described in section 2.5.2.2.

2. Construct the PublicKeyBlob using the result from step 1 in accordance with section 2.5.2.3.

3. Compute the SHA-1 hash ([FIPS180-4] section 6.1) of the PublicKeyBlob.

4. Take the last 8 bytes from the result of step 3, then reverse the order of those bytes.

79 / 113













5. Encode the result of step 4 into the hexBinary ([W3C-XSD] section 3.2.15) representation.

2.5.2.2 CryptoAPI PUBLICKEYBLOB Format

0 1 2 3 4 5 6 7 8 910 1 2 3 4 5 6 7 8 9

20 1 2 3 4 5 6 7 8 9

30 1

0x06 0x02 0x00 0x00

0x00 0x24 0x00 0x00

0x52 0x53 0x41 0x31

0x00 0x08 0x00 0x00

Public Exponent

Modulus

...

...

...

...

...

...

(Variable)

Public Exponent (4 bytes): This MUST be a 32-bit unsigned number in little-endian format. It MUST be the public exponent of the key pair, referred to as e in [RFC3447] section 2.

Modulus (Variable): This MUST be the RSA modulus, referred to as n in [RFC3447] section 2. It MUST be encoded in little-endian format.

2.5.2.3 PublicKeyBlob Format

0 1 2 3 4 5 6 7 8 910 1 2 3 4 5 6 7 8 9

20 1 2 3 4 5 6 7 8 9

30 1

0x00 0x24 0x00 0x00

0x04 0x80 0x00 0x00

Size of Public Key

80 / 113







...

Public Key

...

...

...

...

(Variable)

Size of Public Key (8 bytes): This MUST be a 64-bit unsigned integer in little-endian format. It MUST contain the size of the Public Key in bytes.

Public Key (Variable): This MUST be an RSA public key ([RFC3447] section 3.1) encoded as described in section 2.5.2.1. The size of the Public Key MUST be equal to the value defined by Size of Public Key.

2.5.3 Software Publisher Identity VerificationThe software publisher identity MUST be verified according to the following criteria:

The Rights Expression Language [ISO/IEC-21000-5] license MUST be verified according to section 2.5.3.1.

If a timestamp is present, verify the timestamp according to the timestamp processing rules described in section 2.5.3.3.

Verify the software publisher certificate according to the software publisher certificate processing rules described in section 2.5.3.2.

The value of the hash attribute in the ManifestInformationType MUST be the same as the computed hash value for the manifest, excluding the signature element (section 2.1.1.3.3 and section 2.2.1.3.2).

2.5.3.1 REL License VerificationThe Rights Expression Language [ISO/IEC-21000-5] license MUST be verified according to the following criteria:

The Rights Expression Language [ISO/IEC-21000-5] license MUST be conformant to the profile defined in section 2.3.2.

The license element subtree MUST be verified as a separate XML document where the license element is the root node of the XML document.

81 / 113








The manifest signature MUST be verified according to section 3.2 of [XMLDSig] and the profile of [XMLDSig] specified in section 2.4.3, using the RSA public key ([RFC3447] section 3.1) included in the RSAKeyValueType.

The signature of the REL license MUST be verified using the public key in the software publisher certificate. The RSAKeyValueType MUST be present and it MUST contain the same public key as the key in the software publisher certificate.

The string representation (section 2.5.3.4) of the Subject name ([RFC3280] section 4.1.2.6) in the software publisher certificate MUST be identical with the value of the X509SubjectName element (section 2.4.2.3.3).

2.5.3.2 Software Publisher Certificate ProcessingThe software publisher’s signing certificate and certificate chain MUST be verified against the following criteria:

The certificate chain MUST be validated to a trusted root certificate by using X.509 path validation rules as specified by [RFC3280] section 6.

Either the signing certificate MUST contain the extended key usage (EKU) ([RFC3280] section 4.2.1.13) value for code signing ("1.3.6.1.5.5.7.3.3.") or there MUST be no EKU fields present in the signing certificate.

The certificate chain MUST be within its validity period. If the certificate chain is not within its validity period, the signature MUST have a timestamp and that timestamp MUST be validated according to the timestamp processing rules (section 2.5.3.3). If the signature has a timestamp, the certificate chain MUST be within its validity period at the timestamp time.

If any of these conditions are not met, the signature MUST be treated as invalid.

2.5.3.3 Timestamp ProcessingA timestamp MUST be verified according to the following criteria:

The signature of the timestamp MUST be verified according to ([RFC2315] section 9).

The certificate chain obtained from the timestamp MUST be built to a trusted root certificate using X.509 path validation rules as specified by [RFC3280] section 6.

The time stamp authority certificate MUST contain the EKU value for timestamping ("1.3.6.1.5.5.7.3.8") ([RFC3280] section 4.2.1.13).

The base 64 encoded value of the content field of the timestamp element (section 2.4.3.3.10) MUST be equal to the value of SignatureValueType.

2.5.3.4 Converting an X.500 Distinguish Name to a StringThe Subject name field of an X.509 certificate ([RFC3280] section 4.1.2.6) is converted to a string according to [RFC1779] but with the following deviations:

1. <spaced-separator> is defined as a comma, followed by a space character:

<spaced-separator> ::= "," " "

2. No optional space characters are added when converting attributes:

<attribute> ::= <string> | <key> "=" <string>

82 / 113















3. If the attribute type is listed in the following table, the corresponding keyword is used.

Object Identifier Keyword

2.5.4.3 CN

2.5.4.7 L

2.5.4.10 O

2.5.4.11 OU

1.2.840.113549.1.9.1 E

2.5.4.6 C

2.5.4.8 S

2.5.4.9 STREET

2.5.4.12 T

2.5.4.42 G

2.5.4.43 I

2.5.4.4 SN

2.5.4.5 SERIALNUMBER

0.9.2342.19200300.100.1.25 DC

2.5.4.13 Description

2.5.4.17 PostalCode

2.5.4.18 POBox

2.5.4.20 Phone

1. If the attribute type is not listed, the attribute is represented by the prefix "OID.", followed by the dotted-decimal representation of the OBJECT IDENTIFIER. For example,

CN=John Doe, OID.1.3.6.1.4.1.311.1.1=Sample Text

2. Double quotation characters (") are added around a converted attribute value if:

a leading or trailing space character is present

one or more of the following characters are present:

Comma (,)

Plus sign (+)

Equal sign (=)

ASCII line feed character (decimal 10)

Less than sign (<)

Greater than sign (>)

83 / 113




Number sign (#)

Semicolon (;)

Single quotation (')

3. Single quotation characters (') are added around a converted attribute value if the double quotation character (") is present.

4. Strings that contain consecutive spaces are not enclosed within quotation marks.

5. Empty strings are enclosed within double quotation marks.

84 / 113




3 Structure ExamplesIn the following sections, the schema definition might differ from the processing rules imposed by the protocol. The XSD in this specification provides a base description of the file format. The text that introduces the XSD specifies additional restrictions that reflect protocol behavior. For example, the schema definition might allow for an element to be empty, null, or not present but the behavior of the protocol as specified restricts the same elements to being non-empty, present, and not null.

The following example describes the contents of a typical deployment package (2) that contains a single add-in with one additional file. The package also defines a post-deployment action.

The deployment package (2) consists of the following files:

deployment manifest: SolutionAddIn.vsto

application manifest: application.manifest

package files: file.txt.deploy and SolutionAddIn.dll.deploy

The package files have not been included in this example.

The hashes and signature information in this sample have to be updated to match the customization assemblies, dependent files, and certificate being used.

3.1 Deployment ManifestThe deployment manifest specifies a deployment package (2) with "Solution" product name. The deployment manifest also specifies "DefaultPublisher" as the publisher. The version of the deployment package (2) is 1.0.0.0. The deployment manifest specifies an application manifest with "application.manifest" file name.

File name: SolutionAddIn.vsto

<?xml version="1.0" encoding="utf-8"?><asmv1:assembly xsi:schemaLocation="urn:schemas-microsoft-com:asm.v1 assembly.adaptive.xsd" manifestVersion="1.0" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns="urn:schemas-microsoft-com:asm.v2" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xrml="urn:mpeg:mpeg21:2003:01-REL-R-NS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <assemblyIdentity name="SolutionAddIn.vsto" version="1.0.0.0" publicKeyToken="b066060cc54477c1" language="neutral" processorArchitecture="msil" xmlns="urn:schemas-microsoft-com:asm.v1" /> <description asmv2:publisher="DefaultPublisher" asmv2:product="Solution" xmlns="urn:schemas-microsoft-com:asm.v1" /> <deployment install="false" mapFileExtensions="true" /> <dependency> <dependentAssembly dependencyType="install" codebase="application.manifest" size="12267"> <assemblyIdentity name="SolutionAddIn.dll" version="1.0.0.0" publicKeyToken="b066060cc54477c1" language="neutral" processorArchitecture="msil" type="win32" /> <hash> <dsig:Transforms> <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" /> </dsig:Transforms> <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <dsig:DigestValue>ZPE5LAa0vNtrMu975iuZUyCQdvU=</dsig:DigestValue> </hash>

85 / 113




</dependentAssembly> </dependency> <publisherIdentity name="CN=domain\user_name" issuerKeyHash="9c928594208093ebb2e5ef59a0741d206f531315" /> <Signature Id="StrongNameSignature" xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>HffV8wZDgFWlf2qTe5BLbjG2Fmo=</DigestValue> </Reference> </SignedInfo> <SignatureValue>dqbdvXmZ8X+P0lEfJopm78P4yUOHCHvPbuzovIevdFEiFZy7cQyiA6v/1SOfzUGY0Mv/DmqQF/EIUvnF9PuWesxiLkyCuaQuQHPRsdDcmAkq+aNWO9OnYrymL27uSsc+KxlaGN+3U/zxPieOTyJoh+8/f3+tRcpjZFIOQlpo3FQ=</SignatureValue> <KeyInfo Id="StrongNameKeyInfo"> <KeyValue> <RSAKeyValue> <Modulus>3WAAL94VOOQBWMFmGR552OLjqvUtfZZ5x8mXBy1xIj5SNwwiLZCFcDEn3jWFC/QyII0jbsRh7t6/UjojcVkJ9q0IOMZH7LiREiCQytbQZhtlRt8cgP3Vbob9ChKuKbA8QrvisaFmjniOLyT3T46Wd3ywF3prqGXQmcXuRcaRIjc=</Modulus> <Exponent>AQAB</Exponent> </RSAKeyValue> </KeyValue> <msrel:RelData xmlns:msrel="http://schemas.microsoft.com/windows/rel/2005/reldata"> <r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" xmlns:as="http://schemas.microsoft.com/windows/pki/2005/Authenticode"> <r:grant> <as:ManifestInformation Hash="6a16b6316e4b907b936a7fa555804306f3d5f71d" Description="" Url=""> <as:assemblyIdentity name="SolutionAddIn.vsto" version="1.0.0.0" publicKeyToken="b066060cc54477c1" language="neutral" processorArchitecture="msil" xmlns="urn:schemas-microsoft-com:asm.v1" /> </as:ManifestInformation> <as:SignedBy /> <as:AuthenticodePublisher> <as:X509SubjectName>CN=domain\user_name</as:X509SubjectName> </as:AuthenticodePublisher> </r:grant> <r:issuer> <Signature Id="AuthenticodeSignature" xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>K/VSW7AqnTijU4lOgquOt+t6rZI=</DigestValue>

86 / 113




</Reference> </SignedInfo> <SignatureValue>WV+k1Z2TSa7mBDgZZWHykPVYRXIvyFC3D+ZFPv5bdtegUNGx7+Wy+82cn1UGfQdQvztt9OBRpESV5Bt7R46TdV63VlX57/vpBqT+4NsQbvVarPKmslGp9lg5kWeO43PPjNe9B6GRNAaTqk35znR+CZJVeIpiV0jfpn/Ka3vM3Tw=</SignatureValue> <KeyInfo> <KeyValue> <RSAKeyValue> <Modulus>3WAAL94VOOQBWMFmGR552OLjqvUtfZZ5x8mXBy1xIj5SNwwiLZCFcDEn3jWFC/QyII0jbsRh7t6/UjojcVkJ9q0IOMZH7LiREiCQytbQZhtlRt8cgP3Vbob9ChKuKbA8QrvisaFmjniOLyT3T46Wd3ywF3prqGXQmcXuRcaRIjc=</Modulus> <Exponent>AQAB</Exponent> </RSAKeyValue> </KeyValue> <X509Data> <X509Certificate>MIIB6jCCAVegAwIBAgIQ/K/TJGThnqRP5PtyhbwTljAJBgUrDgMCHQUAMCsxKTAnBgNVBAMeIABSAEUARABNAE8ATgBEAFwAYgBpAGEAcABwAGwAYQBiMB4XDTA5MDUyNjE3MTkyOFoXDTM5MDEwMjAwMDAwMFowKzEpMCcGA1UEAx4gAFIARQBEAE0ATwBOAEQAXABiAGkAYQBwAHAAbABhAGIwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN1gAC/eFTjkAVjBZhkeedji46r1LX2WecfJlwctcSI+UjcMIi2QhXAxJ941hQv0MiCNI27EYe7ev1I6I3FZCfatCDjGR+y4kRIgkMrW0GYbZUbfHID91W6G/QoSrimwPEK74rGhZo54ji8k90+Olnd8sBd6a6hl0JnF7kXGkSI3AgMBAAGjFzAVMBMGA1UdJQQMMAoGCCsGAQUFBwMDMAkGBSsOAwIdBQADgYEAlAHOz8XlR8tq25Kzu1hX3VclbhtoeoPBPm0WT/eCTRqqUY6xUO+9T7e/tHWC/cXKPgmBa34fT8BOzX6lvPsk8xhLtEqJ8uvgN/K6pBU3rYjNtk9mblyPPWNi0/ALzdQEFEYa5hjbNggIjDqLzKYuNVpCzJK/TFdX4HH+FDTBKrA=</X509Certificate> </X509Data> </KeyInfo> </Signature> </r:issuer> </r:license> </msrel:RelData> </KeyInfo> </Signature></asmv1:assembly>

3.2 Application ManifestThe application manifest specifies a single customization of the type add-in implemented by the "SolutionAddIn.dll" assembly. The "SolutionAddIn.dll" assembly is a package file included in the deployment package (2). The application manifest specifies another file with the name "file.txt" that is included in the deployment package (2). The application manifest also specifies a post-deployment action with the "SolutionDeploymentPostAction" entry point.

File name: application.manifest<?xml version="1.0" encoding="utf-8"?><asmv1:assembly xsi:schemaLocation="urn:schemas-microsoft-com:asm.v1 assembly.adaptive.xsd" manifestVersion="1.0" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns="urn:schemas-microsoft-com:asm.v2" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <asmv1:assemblyIdentity name="SolutionAddIn.dll" version="1.0.0.0" publicKeyToken="b066060cc54477c1" language="neutral" processorArchitecture="msil" type="win32" /> <application /> <entryPoint> <co.v1:customHostSpecified xmlns:co.v1="urn:schemas-microsoft-com:clickonce.v1" />

87 / 113




</entryPoint> <trustInfo> <security xmlns="urn:schemas-microsoft-com:asm.v2"> <applicationRequestMinimum> <PermissionSet Unrestricted="true" ID="Custom" SameSite="site" /> <defaultAssemblyRequest permissionSetReference="Custom" /> </applicationRequestMinimum> <requestedExecutionLevel level="asInvoker" xmlns="urn:schemas-microsoft-com:asm.v3" /> </security> </trustInfo> <dependency> <dependentOS> <osVersionInfo> <os majorVersion="4" minorVersion="10" buildNumber="0" servicePackMajor="0" /> </osVersionInfo> </dependentOS> </dependency> <dependency> <dependentAssembly dependencyType="preRequisite" allowDelayedBinding="true"> <assemblyIdentity name="Microsoft.Windows.CommonLanguageRuntime" version="2.0.50727.0" /> </dependentAssembly> </dependency><dependency> <dependentAssembly dependencyType="install" allowDelayedBinding="true" codebase="SolutionAddIn.dll" size="10752"> <assemblyIdentity name="SolutionAddIn" version="1.0.0.0" publicKeyToken="B066060CC54477C1" language="neutral" processorArchitecture="msil" /> <hash> <dsig:Transforms> <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" /> </dsig:Transforms> <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <dsig:DigestValue>UwfhkV3zY6EMHgP00BmYMA9cFJY=</dsig:DigestValue> </hash> </dependentAssembly> </dependency> <file name="file.txt" size="3"> <hash> <dsig:Transforms> <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" /> </dsig:Transforms> <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <dsig:DigestValue>VyGMMWtpIeLNYQJ6I4ftwxotlHE=</dsig:DigestValue> </hash> </file> <vstav3:addIn xmlns:vstav3="urn:schemas-microsoft-com:vsta.v3"> <vstav3:entryPointsCollection xmlns:vstav3="urn:schemas-microsoft-com:vsta.v3"> <vstav3:entryPoints> <vstav3:entryPoint class="SolutionAddIn.ThisAddIn"> <assemblyIdentity name="SolutionAddIn" version="1.0.0.0" publicKeyToken="B066060CC54477C1" language="neutral" processorArchitecture="msil" /> </vstav3:entryPoint> </vstav3:entryPoints> </vstav3:entryPointsCollection> <vstav3:update enabled="false" xmlns:vstav3="urn:schemas-microsoft-com:vsta.v3" /> <vstav3:postActions xmlns:vstav3="urn:schemas-microsoft-com:vsta.v3"> <vstav3:postAction>

88 / 113




<vstav3:entryPoint class="SolutionAddIn.SolutionDeploymentPostAction"> <assemblyIdentity name="SolutionAddIn" version="1.0.0.0" publicKeyToken="94de0004b6e3fcc5" language="neutral" processorArchitecture="msil" /> </vstav3:entryPoint> <vstav3:postActionData> </vstav3:postActionData> </vstav3:postAction> </vstav3:postActions> <vstav3:application xmlns:vstav3="urn:schemas-microsoft-com:vsta.v3"> <vstov4:customizations xmlns:vstov4="urn:schemas-microsoft-com:vsto.v4"> <vstov4:customization> <vstov4:appAddIn application="Outlook" loadBehavior="2" keyName="OutlookAddIn1"> <vstov4:friendlyName>OutlookAddIn1</vstov4:friendlyName> <vstov4:description>OutlookAddIn1</vstov4:description> </vstov4:appAddIn> </vstov4:customization> </vstov4:customizations> </vstav3:application> </vstav3:addIn> <publisherIdentity name="CN=domain\user_name" issuerKeyHash="9c928594208093ebb2e5ef59a0741d206f531315" /> <Signature Id="StrongNameSignature" xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>aexIJyfGPdjKGHXnb1IPnuDJY3s=</DigestValue> </Reference> </SignedInfo> <SignatureValue>R5zs62eeKbJyHooS5YDvKBiBzixFFMvQ5VynRND2MguZe3phsuCwHvRwZVs+eDq0bU1SfscsI69c0+R/olM6wfmpvroQdNVA6xSI33Ud17GDJemKS7o/0nQaiOjXnD8tB9/hIoeZPSD5Zic6LbX8bzXtickKV2HmQiKmaZqXgY8=</SignatureValue> <KeyInfo Id="StrongNameKeyInfo"> <KeyValue> <RSAKeyValue> <Modulus>3WAAL94VOOQBWMFmGR552OLjqvUtfZZ5x8mXBy1xIj5SNwwiLZCFcDEn3jWFC/QyII0jbsRh7t6/UjojcVkJ9q0IOMZH7LiREiCQytbQZhtlRt8cgP3Vbob9ChKuKbA8QrvisaFmjniOLyT3T46Wd3ywF3prqGXQmcXuRcaRIjc=</Modulus> <Exponent>AQAB</Exponent> </RSAKeyValue> </KeyValue> <msrel:RelData xmlns:msrel="http://schemas.microsoft.com/windows/rel/2005/reldata"> <r:license xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" xmlns:as="http://schemas.microsoft.com/windows/pki/2005/Authenticode"> <r:grant> <as:ManifestInformation Hash="7b63c9e09e0f526fe77518cad83dc6272748ec69" Description="" Url=""> <as:assemblyIdentity name="SolutionAddIn.dll" version="1.0.0.0" publicKeyToken="b066060cc54477c1" language="neutral" processorArchitecture="msil" type="win32" /> </as:ManifestInformation> <as:SignedBy />

89 / 113




<as:AuthenticodePublisher> <as:X509SubjectName>CN=domain\user_name</as:X509SubjectName> </as:AuthenticodePublisher> </r:grant> <r:issuer> <Signature Id="AuthenticodeSignature" xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>ZdHni7uhJluZnODxK0NqWPRYdDE=</DigestValue> </Reference> </SignedInfo> <SignatureValue>oGL8ICFBIXxTbjK1iRwzidKGUh14VbleFHrjGxEFrTp+R2x4V+AmJxgM8d7qE2bS2ifqHJbJA3lphQG2e0iT4PyZrQCJTPc3TNnmz837wnqaf7tT2U8KNc8W+apaNs8z+QCHIuGyOZZCzZ/RjX/o5lph8Fgv1qVVwQtPTABpt8U=</SignatureValue> <KeyInfo> <KeyValue> <RSAKeyValue> <Modulus>3WAAL94VOOQBWMFmGR552OLjqvUtfZZ5x8mXBy1xIj5SNwwiLZCFcDEn3jWFC/QyII0jbsRh7t6/UjojcVkJ9q0IOMZH7LiREiCQytbQZhtlRt8cgP3Vbob9ChKuKbA8QrvisaFmjniOLyT3T46Wd3ywF3prqGXQmcXuRcaRIjc=</Modulus> <Exponent>AQAB</Exponent> </RSAKeyValue> </KeyValue> <X509Data> <X509Certificate>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</X509Certificate> </X509Data> </KeyInfo> </Signature> </r:issuer> </r:license> </msrel:RelData> </KeyInfo> </Signature></asmv1:assembly>

The hashes and signature information in this sample have to be updated to match the customization assemblies, dependent files, and certificate being used.

90 / 113




4 Security

4.1 Security Considerations for ImplementersThis structure simply represents a set of XML files. Implementations that process XML files contained in this format ought to guard against the same kinds of threats that occur when processing other XML files.

This structure uses the SHA-1 hashing algorithm for the hash of files in the deployment package (2). The application manifest contains a hash for all the package files that are referenced (section 2.2.2.3.4). The deployment manifest contains a hash of the application manifest (section 2.1.2.3.4).

The deployment package (2) requests the unrestricted code access security permission set, any executable code that is deployed with the package runs with this permission set (section 2.2.2.3.12).

4.1.1 Digital SignaturesTo provide the evidence for the deployment package (2), both manifests contain a publisherIdentityType (section 2.1.2.3.6 and section 2.2.2.3.9) and are signed using XML signatures as specified by section 2.3, section 2.4 and section 2.5 – see signature element in assemblyType (section 2.1.1.3.3 and section 2.2.1.3.2).

4.2 Index of Security Fields

Security fields Section

The deployment manifest contains a hash of the application manifest 2.1.2.3.4The application manifest contains a hash for all the package files 2.2.2.3.4Both manifests contain a publisherIdentityType 2.1.2.3.6, 2.2.2.3.9Signature element in assemblyType 2.1.1.3.3, 2.2.1.3.2Strong Name Signature 2.3Software Publisher Signature 2.4Algorithms 2.5

91 / 113




5 Appendix A: Full XML Schema

5.1 Deployment Manifest XML SchemaFile: asm.xsd

<?xml version="1.0" encoding="UTF-8"?><xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2" xmlns:asm.v1="urn:schemas-microsoft-com:asm.v1" xmlns:clickonce.v2="urn:schemas-microsoft-com:clickonce.v2"xmlns:xrml="http://www.xrml.org/schema/2001/11/xrml2core" xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" targetNamespace="urn:schemas-microsoft-com:asm.v1" elementFormDefault="qualified" attributeFormDefault="unqualified" > <xs:include schemaLocation="asm.v1.types.xsd" /> <xs:include schemaLocation="co.v2.types.xsd" /> <xs:import namespace="urn:schemas-microsoft-com:asm.v2" schemaLocation="asm.v2.types.xsd" /> <xs:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="external/xmldsig-core-schema.0.0.0.2.xsd" /> <xs:element name="assembly" type="assemblyType" > </xs:element> <xs:complexType name="assemblyType" > <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v1:assemblyIdentityType" /> <xs:element name="description" type="descriptionType" /> <xs:element ref="asm.v2:deployment" /> <xs:element ref="clickonce.v2:compatibleFrameworks"/> <xs:element ref="asm.v2:dependency" /> <xs:element ref="asm.v2:publisherIdentity" /> <xs:element ref="ds:Signature" /> </xs:sequence> <xs:attribute name="manifestVersion" type="asm.v1:twoPartVersionType" use="required" fixed="1.0" /> </xs:complexType></xs:schema>

File: asm.v1.types.xsd

<?xml version="1.0" encoding="utf-8"?><xs:schema xmlns:asm.v1="urn:schemas-microsoft-com:asm.v1" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2" targetNamespace="urn:schemas-microsoft-com:asm.v1" attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema" > <xs:import namespace="urn:schemas-microsoft-com:asm.v2" schemaLocation="asm.v2.types.xsd" /> <xs:simpleType name="twoPartVersionType" > <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="publicKeyTokenType" > <xs:restriction base="xs:string"> <xs:pattern value="([0-9]|[a-f]|[A-F]){16}" /> </xs:restriction>

92 / 113




</xs:simpleType> <xs:simpleType name="fourPartVersionType" > <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="fileNameStringType" > <xs:restriction base="xs:string"> <xs:pattern value="([\u0020]|[\u0021]|[\u0024]|[\u0025]|[\u0027-\u0029]|[\u002B-\u002E]|[\u0030-\u0039]|[\u003B]|[\u003D]|[\u0040-\u005B]|[\u005D-\u007B]|[\u007D-\uFFFD]|[\u10000-\u10FFFF])*" /> </xs:restriction> </xs:simpleType> <xs:complexType name="assemblyIdentityType" > <xs:attribute name="name" type="asm.v1:fileNameStringType" use="required" /> <xs:attribute name="version" type="asm.v1:fourPartVersionType" use="required" /> <xs:attribute name="processorArchitecture" type="xs:string" use="required" fixed="msil" /> <xs:attribute name="publicKeyToken" type="asm.v1:publicKeyTokenType" use="required" /> <xs:attribute name="language" type="xs:string" use="required" fixed="neutral" /> </xs:complexType> <xs:complexType name="descriptionType" mixed="true" > <xs:attribute ref="asm.v2:publisher" use="required" /> <xs:attribute ref="asm.v2:product" use="required" /> </xs:complexType></xs:schema>


<?xml version="1.0" encoding="utf-8"?><xs:schema targetNamespace="urn:schemas-microsoft-com:asm.v2" attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2"> <xs:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="external/xmldsig-core-schema.0.0.0.2.xsd" /> <xs:attribute name="publisher" type="asm.v2:fileNameStringType" fixed="DefaultPublisher" /> <xs:attribute name="product" type="asm.v2:fileNameStringType" /> <xs:element name="deployment" type="asm.v2:deploymentType" /> <xs:element name="dependency" type="asm.v2:dependencyType"/> <xs:element name="publisherIdentity" type="asm.v2:publisherIdentityType" /> <xs:simpleType name="fourPartVersionType" > <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="fileNameStringType" > <xs:restriction base="xs:string">

93 / 113




<xs:pattern value="([\u0020]|[\u0021]|[\u0024]|[\u0025]|[\u0027-\u0029]|[\u002B-\u002E]|[\u0030-\u0039]|[\u003B]|[\u003D]|[\u0040-\u005B]|[\u005D-\u007B]|[\u007D-\uFFFD]|[\u10000-\u10FFFF])*" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="publicKeyTokenType" > <xs:restriction base="xs:string"> <xs:pattern value="([0-9]|[a-f]|[A-F]){16}" /> </xs:restriction> </xs:simpleType> <xs:complexType name="deploymentType" > <xs:attribute name="install" type="xs:boolean" use="required" fixed="false" /> <xs:attribute name="mapFileExtensions" type="xs:boolean" use="optional" default="false" /> </xs:complexType> <xs:complexType name="dependencyType" > <xs:sequence> <xs:choice> <xs:element name="dependentAssembly" type="asm.v2:dependentAssemblyType" /> </xs:choice> </xs:sequence> </xs:complexType> <xs:complexType name="dependentAssemblyType" > <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v2:assemblyIdentityType" /> <xs:element name="hash" type="asm.v2:hashType" minOccurs="0" maxOccurs="unbounded" /> </xs:sequence> <xs:attribute name="dependencyType" type="xs:string" use="required" fixed="install" /> <xs:attribute name="codebase" type="xs:anyURI" /> <xs:attribute name="size" type="xs:integer" use="optional" /> </xs:complexType> <xs:complexType name="hashType" > <xs:complexContent> <xs:extension base="ds:ReferenceType"> <xs:sequence> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded" /> </xs:sequence> </xs:extension> </xs:complexContent> </xs:complexType> <xs:complexType name="assemblyIdentityType" > <xs:attribute name="name" type="asm.v2:fileNameStringType" use="required" /> <xs:attribute name="version" type="asm.v2:fourPartVersionType" use="required" /> <xs:attribute name="type" type="xs:string" use="optional" fixed="win32" /> <xs:attribute name="processorArchitecture" type="xs:string" use="required" fixed="msil" /> <xs:attribute name="publicKeyToken" type="asm.v2:publicKeyTokenType" use="required" /> <xs:attribute name="language" type="xs:string" use="required" fixed="neutral" /> </xs:complexType> <xs:complexType name="publisherIdentityType" > <xs:attribute name="name" type="xs:string" /> <xs:attribute name="issuerKeyHash" type="xs:string" /> </xs:complexType></xs:schema>

File: co.v2.xsd

94 / 113




<?xml version="1.0" encoding="utf-8"?><xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:clickonce.v2="urn:schemas-microsoft-com:clickonce.v2" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2" targetNamespace="urn:schemas-microsoft-com:clickonce.v2" xmlns:odoc="http://schemas.microsoft.com/internal/obd" elementFormDefault="qualified">

<xs:simpleType name="profileType"> <xs:restriction base="xs:string"> <xs:enumeration value="Full"/> <xs:enumeration value="Client"/> </xs:restriction> </xs:simpleType>

<xs:simpleType name="twoPartVersionType"> <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType>

<xs:simpleType name="threePartVersionType"> <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType>

<xs:complexType name="frameworkType"> <xs:attribute name="targetVersion" type="clickonce.v2:twoPartVersionType" use="required"/> <xs:attribute name="profile" type="clickonce.v2:profileType" use="required"/> <xs:attribute name="supportedRuntime" type="clickonce.v2:threePartVersionType" use="required"/> </xs:complexType>

<xs:complexType name="compatibleFrameworksType"> <xs:sequence> <xs:choice> <xs:element name="framework" type="clickonce.v2:frameworkType" minOccurs="1" maxOccurs="unbounded"/> </xs:choice> </xs:sequence> </xs:complexType> <xs:element name="compatibleFrameworks" type="clickonce.v2:compatibleFrameworksType"/> </xs:schema>

5.2 Application Manifest XML SchemaFile: asm.xsd

<?xml version="1.0" encoding="UTF-8"?><xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:vsta.v3="urn:schemas-microsoft-com:vsta.v3" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asm.v3="urn:schemas-microsoft-

95 / 113




com:asm.v3" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2" xmlns:asm.v1="urn:schemas-microsoft-com:asm.v1" xmlns:xrml="http://www.xrml.org/schema/2001/11/xrml2core" xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:enc="http://www.w3.org/2001/04/xmlenc#" targetNamespace="urn:schemas-microsoft-com:asm.v1" elementFormDefault="qualified" attributeFormDefault="unqualified" > <xs:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="external/xmldsig-core-schema.0.0.0.2.xsd" /> <xs:include schemaLocation="asm.v1.types.xsd" /> <xs:import namespace="urn:schemas-microsoft-com:asm.v2" schemaLocation="asm.v2.types.xsd" /> <xs:import namespace="urn:schemas-microsoft-com:vsta.v3" schemaLocation="vsta.v3.xsd" /> <xs:element name="assembly" type="assemblyType" > </xs:element> <xs:complexType name="assemblyType" > <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v1:assemblyIdentityType" /> <xs:element ref="asm.v2:application" /> <xs:element ref="asm.v2:entryPoint" /> <xs:element ref="asm.v2:trustInfo" /> <xs:element ref="asm.v2:dependency" minOccurs="0" maxOccurs="24575" /> <xs:element ref="asm.v2:file" minOccurs="0" maxOccurs="24575" /> <xs:element ref="vsta.v3:addIn" /> <xs:element ref="asm.v2:publisherIdentity" /> <xs:element ref="ds:Signature" /> </xs:sequence> <xs:attribute name="manifestVersion" type="asm.v1:twoPartVersionType" use="required" fixed="1.0" /> </xs:complexType></xs:schema>


<?xml version="1.0" encoding="utf-8"?><xs:schema xmlns:asm.v1="urn:schemas-microsoft-com:asm.v1" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2" targetNamespace="urn:schemas-microsoft-com:asm.v1" attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema" > <xs:import namespace="urn:schemas-microsoft-com:asm.v2" schemaLocation="asm.v2.types.xsd" /> <xs:simpleType name="twoPartVersionType" > <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="publicKeyTokenType" > <xs:restriction base="xs:string"> <xs:pattern value="([0-9]|[a-f]|[A-F]){16}" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="fourPartVersionType" > <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction>

96 / 113




</xs:simpleType> <xs:simpleType name="fileNameStringType" > <xs:restriction base="xs:string"> <xs:pattern value="([\u0020]|[\u0021]|[\u0024]|[\u0025]|[\u0027-\u0029]|[\u002B-\u002E]|[\u0030-\u0039]|[\u003B]|[\u003D]|[\u0040-\u005B]|[\u005D-\u007B]|[\u007D-\uFFFD]|[\u10000-\u10FFFF])*" /> </xs:restriction> </xs:simpleType> <xs:complexType name="assemblyIdentityType" > <xs:attribute name="name" type="asm.v1:fileNameStringType" use="required" /> <xs:attribute name="version" type="asm.v1:fourPartVersionType" use="required" /> <xs:attribute name="type" type="xs:string" use="optional" fixed="win32" /> <xs:attribute name="processorArchitecture" type="xs:string" use="required" fixed="msil" /> <xs:attribute name="publicKeyToken" type="asm.v1:publicKeyTokenType" use="required" /> <xs:attribute name="language" type="xs:string" use="required" fixed="neutral" /> </xs:complexType></xs:schema>


<?xml version="1.0" encoding="utf-8"?><xs:schema targetNamespace="urn:schemas-microsoft-com:asm.v2" attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2" xmlns:asm.v3="urn:schemas-microsoft-com:asm.v3" xmlns:co.v1="urn:schemas-microsoft-com:clickonce.v1" > <xs:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="external/xmldsig-core-schema.0.0.0.2.xsd" /> <xs:import namespace="urn:schemas-microsoft-com:clickonce.v1" schemaLocation="co.v1.xsd" /> <xs:import namespace="urn:schemas-microsoft-com:asm.v3" schemaLocation="asm.v3.types.xsd" /> <xs:element name="application" type="asm.v2:applicationType" /> <xs:element name="entryPoint" type="asm.v2:entryPointType" /> <xs:element name="trustInfo" type="asm.v2:trustInfoType" /> <xs:element name="dependency" type="asm.v2:dependencyType" /> <xs:element name="file" type="asm.v2:fileType" /> <xs:element name="assemblyIdentity" type="asm.v2:assemblyIdentityType" /> <xs:element name="publisherIdentity" type="asm.v2:publisherIdentityType" /> <xs:complexType name="applicationType" /> <xs:complexType name="dependencyType" > <xs:sequence> <xs:choice> <xs:element name="dependentAssembly" type="asm.v2:dependentAssemblyType" /> <xs:element name="dependentOS" type="asm.v2:dependentOSType" /> </xs:choice> </xs:sequence> </xs:complexType> <xs:complexType name="dependentAssemblyType" > <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v2:assemblyIdentityType" /> <xs:element name="hash" type="asm.v2:hashType" minOccurs="0" maxOccurs="unbounded" /> </xs:sequence> <xs:attribute name="dependencyType" type="asm.v2:dependencyTypeType" use="optional" default="preRequisite" /> <xs:attribute name="codebase" type="xs:anyURI" /> <xs:attribute name="size" type="xs:integer" use="optional" />

97 / 113




<xs:attribute name="allowDelayedBinding" type="xs:boolean" use="required" fixed="true" /> </xs:complexType> <xs:complexType name="hashType" > <xs:complexContent> <xs:extension base="ds:ReferenceType"> <xs:sequence> <xs:any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded" /> </xs:sequence> </xs:extension> </xs:complexContent> </xs:complexType> <xs:complexType name="dependentOSType" > <xs:sequence> <xs:element name="osVersionInfo" type="asm.v2:osVersionInfoType" /> </xs:sequence> </xs:complexType> <xs:complexType name="osVersionInfoType" > <xs:sequence> <xs:element name="os" type="asm.v2:osType" /> </xs:sequence> </xs:complexType> <xs:complexType name="osType" > <xs:attribute name="majorVersion" type="asm.v2:TwoByteVersion" use="required" fixed="4" /> <xs:attribute name="minorVersion" type="asm.v2:TwoByteVersion" use="required" fixed="10" /> <xs:attribute name="buildNumber" type="asm.v2:TwoByteVersion" use="required" fixed="0" /> <xs:attribute name="servicePackMajor" type="asm.v2:OneByteVersion" use="required" fixed="0" /> </xs:complexType> <xs:simpleType name="TwoByteVersion" > <xs:restriction base="xs:integer"> <xs:minInclusive value="0" /> <xs:maxInclusive value="65535" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="OneByteVersion" > <xs:restriction base="xs:integer"> <xs:minInclusive value="0" /> <xs:maxInclusive value="255" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="dependencyTypeType" > <xs:restriction base="xs:string"> <xs:enumeration value="preRequisite" /> <xs:enumeration value="install"/> </xs:restriction> </xs:simpleType> <xs:simpleType name="fileNameStringType" > <xs:restriction base="xs:string"> <xs:pattern value="([\u0020]|[\u0021]|[\u0024]|[\u0025]|[\u0027-\u0029]|[\u002B-\u002E]|[\u0030-\u0039]|[\u003B]|[\u003D]|[\u0040-\u005B]|[\u005D-\u007B]|[\u007D-\uFFFD]|[\u10000-\u10FFFF])*" /> </xs:restriction> </xs:simpleType> <xs:complexType name="assemblyIdentityType" >

98 / 113




<xs:attribute name="name" type="asm.v2:fileNameStringType" use="required" /> <xs:attribute name="version" type="asm.v2:fourPartVersionType" use="required" /> <xs:attribute name="type" type="xs:string" use="optional" fixed="win32" /> <xs:attribute name="processorArchitecture" type="xs:string" use="optional" fixed="msil" /> <xs:attribute name="publicKeyToken" type="asm.v2:publicKeyTokenType" use="optional" /> <xs:attribute name="language" type="xs:string" use="optional" fixed="neutral" /> </xs:complexType> <xs:simpleType name="fourPartVersionType" > <xs:restriction base="xs:string"> <xs:pattern value="(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])\.(0*[0-9]{1,4}|0*[1-5][0-9]{4}|0*6[0-4][0-9]{3}|0*65[0-4][0-9]{2}|0*655[0-2][0-9]|0*6553[0-5])" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="publicKeyTokenType" > <xs:restriction base="xs:string"> <xs:pattern value="([0-9]|[a-f]|[A-F]){16}" /> </xs:restriction> </xs:simpleType> <xs:complexType name="publisherIdentityType" > <xs:attribute name="name" type="xs:string" /> <xs:attribute name="issuerKeyHash" type="xs:string" /> </xs:complexType> <xs:complexType name="entryPointType" > <xs:sequence> <xs:element ref="co.v1:customHostSpecified" /> </xs:sequence> </xs:complexType> <xs:complexType name="trustInfoType" > <xs:sequence> <xs:element name="security" type="asm.v2:securityType" /> <xs:element ref="asm.v3:asmv3" minOccurs="0" /> </xs:sequence> </xs:complexType> <xs:complexType name="securityType" > <xs:sequence> <xs:element name="applicationRequestMinimum" type="asm.v2:applicationRequestMinimumType" /> <xs:element name="requestedPrivileges" type="asm.v3:requestedPrivilegesType" /> <xs:element ref="asm.v3:asmv3" minOccurs="0" /> </xs:sequence> </xs:complexType> <xs:complexType name="applicationRequestMinimumType" > <xs:sequence> <xs:element name="PermissionSet" type="asm.v2:PermissionSetType" /> <xs:element name="defaultAssemblyRequest" type="asm.v2:defaultAssemblyRequestType" /> </xs:sequence> </xs:complexType> <xs:complexType name="PermissionSetType" > <xs:attribute name="ID" type="xs:ID" use="required" /> <xs:attribute name="Unrestricted" type="xs:boolean" use="required" fixed="true" /> <xs:attribute name="SameSite" type="xs:string" use="required" fixed="site" /> </xs:complexType> <xs:complexType name="defaultAssemblyRequestType" > <xs:attribute name="permissionSetReference" type="xs:IDREF" /> </xs:complexType>

99 / 113




<xs:complexType name="fileType" > <xs:choice minOccurs="0" maxOccurs="unbounded"> <xs:element name="hash" type="asm.v2:hashType" /> </xs:choice> <xs:attribute name="name" type="xs:string" use="required" /> <xs:attribute name="size" type="xs:unsignedLong" use="required" /> </xs:complexType></xs:schema>

File:asm.v3.types.xsd

<?xml version="1.0" encoding="utf-8"?><xs:schema xmlns:asm.v3="urn:schemas-microsoft-com:asm.v3" targetNamespace="urn:schemas-microsoft-com:asm.v3" attributeFormDefault="unqualified" elementFormDefault="qualified" xmlns:xs="http://www.w3.org/2001/XMLSchema" > <xs:element name="asmv3" type="asm.v3:asmv3Type" /> <xs:complexType name="requestedPrivilegesType" > <xs:sequence> <xs:element name="requestedExecutionLevel" type="asm.v3:requestedExecutionLevelType" /> </xs:sequence> </xs:complexType> <xs:complexType name="requestedExecutionLevelType" > <xs:attribute name="level" type="xs:string" use="required" fixed="asInvoker" /> </xs:complexType> <xs:complexType name="asmv3Type" > <xs:sequence> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##any" processContents="skip" /> </xs:sequence> </xs:complexType></xs:schema>

File: co.v1.xsd

<?xml version="1.0" encoding="utf-8"?><xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:co.v1="urn:schemas-microsoft-com:clickonce.v1" targetNamespace="urn:schemas-microsoft-com:clickonce.v1" > <xs:element name="customHostSpecified" type="co.v1:customHostSpecifiedType" /> <xs:complexType name="customHostSpecifiedType" /> </xs:schema>

File: vsta.v3.xsd

<?xml version="1.0" encoding="utf-8"?><xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:asm.v2="urn:schemas-microsoft-com:asm.v2" xmlns:vsto.v4="urn:schemas-microsoft-com:vsto.v4" xmlns:vsta.v3="urn:schemas-microsoft-com:vsta.v3" targetNamespace="urn:schemas-microsoft-com:vsta.v3" attributeFormDefault="unqualified" elementFormDefault="qualified" > <xs:import namespace="urn:schemas-microsoft-com:asm.v2" schemaLocation="asm.v2.types.xsd" /> <xs:import namespace="urn:schemas-microsoft-com:vsto.v4" schemaLocation="vsto.v4.xsd" /> <xs:element name="addIn" type="vsta.v3:addInType" /> <xs:complexType name="addInType" > <xs:sequence> <xs:element name="entryPointsCollection" type="vsta.v3:entryPointsCollectionType" minOccurs="1" maxOccurs="1" />

100 / 113




<xs:element name="update" type="vsta.v3:updateType" maxOccurs="1" minOccurs="1" /> <xs:element name="postActions" type="vsta.v3:postActionsType" maxOccurs="1" minOccurs="0" /> <xs:element name="application" type="vsta.v3:applicationType" maxOccurs="1" minOccurs="0" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="entryPointsCollectionType" > <xs:sequence> <xs:element name="entryPoints" type="vsta.v3:entryPointsType" minOccurs="1" maxOccurs="unbounded" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="entryPointsType" > <xs:sequence> <xs:element name="entryPoint" type="vsta.v3:entryPointType" maxOccurs="unbounded" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:attribute name="id" type="xs:string" use="optional" /> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="entryPointType" mixed="true" > <xs:sequence minOccurs="1" maxOccurs="1"> <xs:element ref="asm.v2:assemblyIdentity" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:attribute name="class" type="xs:string" use="required" /> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="postActionEntryPointType" mixed="true" > <xs:sequence minOccurs="1" maxOccurs="1"> <xs:element ref="asm.v2:assemblyIdentity" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:attribute name="class" type="xs:string" use="required" /> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="updateType" > <xs:sequence> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:attribute name="enabled" type="xs:boolean" use="required" fixed="false" /> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="postActionsType" > <xs:sequence> <xs:element name="postAction" type="vsta.v3:postActionType" maxOccurs="unbounded" minOccurs="0" />

101 / 113




<xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="postActionType" > <xs:sequence> <xs:element name="entryPoint" type="vsta.v3:postActionEntryPointType" maxOccurs="1" minOccurs="1" /> <xs:element name="postActionData" type="vsta.v3:postActionDataType" maxOccurs="1" minOccurs="0" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="postActionDataType" > <xs:sequence> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="applicationType" > <xs:sequence> <xs:element ref="vsto.v4:customizations" /> </xs:sequence> </xs:complexType></xs:schema>

File: vsto.v4.xsd

<?xml version="1.0" encoding="utf-8"?><xs:schema xmlns:vsto.v4="urn:schemas-microsoft-com:vsto.v4" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:schemas-microsoft-com:vsto.v4" xmlns:xs="http://www.w3.org/2001/XMLSchema" > <xs:element name="customizations" type="vsto.v4:customizationsType" /> <xs:complexType name="customizationsType" > <xs:sequence> <xs:element name="customization" type="vsto.v4:customizationType" minOccurs="1" maxOccurs="unbounded" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:complexType name="customizationType" > <xs:sequence> <xs:choice minOccurs="1" maxOccurs="1"> <xs:element name="appAddIn" type="vsto.v4:appAddInType" /> </xs:choice> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:attribute name="id" type="xs:string" use="optional" /> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType>

102 / 113




<xs:complexType name="appAddInType" > <xs:sequence> <xs:element name="friendlyName" type="xs:string" maxOccurs="1" minOccurs="1" /> <xs:element name="description" type="xs:string" maxOccurs="1" minOccurs="0" /> <xs:any minOccurs="0" maxOccurs="unbounded" namespace="##other" processContents="skip" /> </xs:sequence> <xs:attribute name="application" type="xs:string" use="required" fixed="Outlook" /> <xs:attribute name="loadBehavior" type="vsto.v4:loadBehaviorType" use="optional" /> <xs:attribute name="keyName" type="vsto.v4:keyStringType" use="required" /> <xs:anyAttribute namespace="##other" processContents="skip" /> </xs:complexType> <xs:simpleType name="loadBehaviorType" > <xs:restriction base="xs:int"> <xs:enumeration value="2" /> <xs:enumeration value="3" /> </xs:restriction> </xs:simpleType> <xs:simpleType name="keyStringType" > <xs:restriction base="xs:string"> <xs:pattern value="(\u0020|\u0021|[\u0023-\u0029]|[\u002B-\u0039]|\u003B|\u003D|[\u0040-\u005B]|[\u005D-\u007B]|[\u007D-\uD7FF]|[\uE000-\uFFFD]|[\u10000-\u10FFFF])*" /> </xs:restriction> </xs:simpleType></xs:schema>

5.3 http://schemas.microsoft.com/windows/pki/2005/Authenticode Schema

<?xml version="1.0" encoding="utf-8"?><xs:schema targetNamespace="http://schemas.microsoft.com/windows/pki/2005/Authenticode" elementFormDefault="qualified" xmlns="http://schemas.microsoft.com/windows/pki/2005/Authenticode" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:r="urn:mpeg:mpeg21:2003:01-REL-R-NS" xmlns:asm.v1="urn:schemas-microsoft-com:asm.v1" > <xs:import namespace="urn:mpeg:mpeg21:2003:01-REL-R-NS"/> <xs:import namespace="urn:schemas-microsoft-com:asm.v1"/> <xs:import namespace="http://www.w3.org/2000/09/xmldsig#"/> <xs:complexType name="ManifestInformationType"> <xs:sequence> <xs:element name="assemblyIdentity" type="asm.v1:assemblyIdentityType"/> </xs:sequence> <xs:attribute name="Hash" type="ds:CryptoBinary" use="required"/> <xs:attribute name="Description" type="xs:string" use="optional"/> <xs:attribute name="Url" type="xs:anyURI" use="optional"/> </xs:complexType> <xs:complexType name="SignedByType"> <xs:complexContent> <xs:restriction base="r:Right"/> </xs:complexContent> </xs:complexType> <xs:complexType name="AuthenticodePublisherType"> <xs:sequence> <xs:element name="X509SubjectName" type="xs:string"/> </xs:sequence> </xs:complexType>

103 / 113




<xs:element name="ManifestInformation" type="ManifestInformationType"/> <xs:element name="SignedBy" type="SignedByType"/> <xs:element name="AuthenticodePublisher" type="AuthenticodePublisherType"/> <xs:element name="Timestamp" type="ds:CryptoBinary"/></xs:schema>

104 / 113




6 Appendix B: Product BehaviorThe information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include released service packs:

Microsoft Office 2010 suites

Microsoft OneNote Online

Microsoft PowerPoint Online

Microsoft SharePoint Server 2010

Microsoft SharePoint Workspace 2010

Microsoft Office 2013

Microsoft SharePoint Server 2013

Exceptions, if any, are noted below. If a service pack or Quick Fix Engineering (QFE) number appears with the product version, behavior changed in that service pack or QFE. The new behavior also applies to subsequent service packs of the product unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition.

Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms SHOULD or SHOULD NOT implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term MAY implies that the product does not follow the prescription.

<1> Section 2.1.3.1.1: Office 2010 does not support this type.

105 / 113




7 Change TrackingThis section identifies changes that were made to the [MS-OSCO] protocol document between the July 2014 and October 2014 releases. Changes are classified as New, Major, Minor, Editorial, or No change.

The revision class New means that a new document is being released.

The revision class Major means that the technical content in the document was significantly revised. Major changes affect protocol interoperability or implementation. Examples of major changes are:

A document revision that incorporates changes to interoperability requirements or functionality.

The removal of a document from the documentation set.

The revision class Minor means that the meaning of the technical content was clarified. Minor changes do not affect protocol interoperability or implementation. Examples of minor changes are updates to clarify ambiguity at the sentence, paragraph, or table level.

The revision class Editorial means that the formatting in the technical content was changed. Editorial changes apply to grammatical, formatting, and style issues.

The revision class No change means that no new technical changes were introduced. Minor editorial and formatting changes may have been made, but the technical content of the document is identical to the last released version.

Major and minor changes can be described further using the following change types:

New content added.

Content updated.

Content removed.

New product behavior note added.

Product behavior note updated.

Product behavior note removed.

New protocol syntax added.

Protocol syntax updated.

Protocol syntax removed.

New content added due to protocol revision.

Content updated due to protocol revision.

Content removed due to protocol revision.

New protocol syntax added due to protocol revision.

Protocol syntax updated due to protocol revision.

Protocol syntax removed due to protocol revision.

Obsolete document removed.

106 / 113




Editorial changes are always classified with the change type Editorially updated.

Some important terms used in the change type descriptions are defined as follows:

Protocol syntax refers to data elements (such as packets, structures, enumerations, and methods) as well as interfaces.

Protocol revision refers to changes made to a protocol that affect the bits that are sent over the wire.

The changes made to this document are listed in the following table. For more information, please contact [email protected].

SectionTracking number (if applicable) and description

Majorchange(Y or N) Change type

4.2Index of Security Fields

Added table of Security fields and their sections.

Y New content added.

107 / 113





8 IndexA

Algorithms 81conversion from RS public key to

publicKeyToken 82converting an X.500 distinguish name to a

string 85CryptoAPI UBLICKEYBLOB format 82HashTransforms.Identity 81PublicKeyBlob format 83REL license verification 84software publisher certificate processing 84software publisher identity verification 83timestamp processing 84verification of strong name signature 81

Applicability 12Application manifest 26Application manifest – schema asm.v1

global attributes 26Application Manifest example 89Application manifest xml schemas 97Attributes – schema asm.v2

product 19publisher 19

C

Change tracking 108Common data types and fields 14Complex type - schema reldata

RelDataType 63Complex types

xmldsig#CanonicalizationMethodType 74DigestMethodType 77KeyInfoType 78KeyValueType 79ObjectType 77ReferenceType 75RSAKeyValueType 80SignatureMethodType 75SignatureType (section 2.4.3.3.1 73, section

2.4.3.3.2 74)SignedInfoType 74TransformsType 76TransformType 76X509DataType 79

Complex types – Authenticode schemaAuthenticodePublisherType 68ManifestInformationType 67SignedByType 68

Complex types – schema asm.v1assemblyIdentityType (section 2.1.1.3.1 14,

section 2.2.1.3.1 26)

assemblyType (section 2.1.1.3.3 15, section 2.2.1.3.2 27)

descriptionType 15Complex types – schema asm.v2

applicationRequestMinimumType 37applicationType 31assemblyIdentityType (section 2.1.2.3.5 21,

section 2.2.2.3.8 35)defaultAssemblyRequestType 38dependencyType (section 2.1.2.3.2 19, section

2.2.2.3.2 32)dependentAssemblyType (section 2.1.2.3.3 20,

section 2.2.2.3.3 32)dependentOSType 33deploymentType 19entryPointType 36fileType 39hashType (section 2.1.2.3.4 21, section

2.2.2.3.4 33)osType 34osVersionInfoType 34PermissionSetType 38publisherIdentityType (section 2.1.2.3.6 22,

section 2.2.2.3.9 35)securityType 37trustInfoType 36

Complex types - schema clickonce.v1 43Complex types - schema vsta.v3

addInType 44applicationType 48entryPointsCollectionType 45entryPointsType 45entryPointType 46postActionDataType 48postActionEntryPointType 46postActionsType 47postActionType 48updateType 47

Complex types - schema vsto.v4appAddInType 50customizationsType 49customizationType 50

Complex types - schema xmldsig#CanonicalizationMethodType 57DigestMethodType 60KeyInfoType 60KeyValueType 61ReferenceType 58RSAKeyValueType 61SignatureMethodType 58SignatureType 56SignatureValueType 56SignedInfoType 57TransformsType 59

108 / 113




TransformType 59Complex types – URN 01-REL-R-NS

Grant 65Issuer 65License 64Right 66

Conversion from RSA public key to publicKeyToken algorithm 82

Converting an X.500 distinguish name to a string algorithm 85

CryptoAPI PUBLICKEYBLOB format algorithm 82

D

Data types and fields - common 14Deployment manifest 14Deployment Manifest example 87Deployment manifest XML schemas 94Details

algorithms 81application manifest 26common data types and fields 14conversion from RSA public key to

publicKeyToken algorithm 82converting an X.500 distinguish name to a

string algorithm 85CryptoAPI PUBLICKEYBLOB format algorithm

82deployment manifest 14HashTransforms.Identity algorithm 81PublicKeyBlob format algorithm 83REL license verification algorithm 84software publisher certificate processing

algorithm 84software publisher identity verification

algorithm 83strong name signature 52timestamp processing algorithm 84verification of strong name signature

algorithm 81Details – Authenticode schema

AuthenticodePublisher element 66AuthenticodePublisherType complex type 68ManifestInformation element 66ManifestInformationType complex type 67SignedBy element 66SignedByType complex type 68Timestamp element 67

Details – schema asm.v1assembly element (section 2.1.1.1.1 14,

section 2.2.1.1.1 26)assemblyIdentityType complex type (section

2.1.1.3.1 14, section 2.2.1.3.1 26)assemblyType complex type 15descriptType complex type 15fileNameStringType simple type (section

2.1.1.4.4 17, section 2.2.1.4.4 29)

fourPartVersionType simple type (section 2.1.1.4.3 17, section 2.2.1.4.3 29)

publicKeyTokenType simple type (section 2.1.1.4.2 17, section 2.2.1.4.2 28)

twoPartVersionType simple type (section 2.1.1.4.1 16, section 2.2.1.4.1 28)

Details – schema asm.v2application element 30applicationRequestMinimumType complex

type 37applicationType complex type 31assemblyIdentity element 31assemblyIdentityType complex type (section

2.1.2.3.5 21, section 2.2.2.3.8 35)defaultAssemblyRequestType complex type

38dependency element (section 2.1.2.1.2 18,

section 2.2.2.1.4 30)dependencyType complex type (section

2.1.2.3.2 19, section 2.2.2.3.2 32)dependencyTypeType simple type 40dependentAssemblyType complex type (section

2.1.2.3.3 20, section 2.2.2.3.3 32)dependentOSType complex type 33deployment element 18deploymentType complex type 19entryPoint element 30entryPointType complex type 36file element 30fileNameStringType simple type (section

2.1.2.4.2 23, section 2.2.2.4.4 40)fileType complex type 39fourPartVersionType simple type (section

2.1.2.4.1 22, section 2.2.2.4.5 41)hashType complex type (section 2.1.2.3.4 21,

section 2.2.2.3.4 33)OneByteVersion simple type 39osType complex type 34osVersionInfoType complex type 34PermissionSetType complex type 38product attribute 19publichKeyTokenType simple type 41publicKeyTokenType simple type 23publisher attribute 19publisherIdentity element (section 2.1.2.1.3 18,

section 2.2.2.1.7 31)publisherIdentityType complex type (section

2.1.2.3.6 22, section 2.2.2.3.9 35)securityType complex type 37trustInfo element 30trustInfoType complex type 36TwoByteVersion simple type 39

Details – schema asm.v3asmv3 element 41asmv3Type complex type 42requestedExecutionLevelType complex type

42

109 / 113




requestedPrivilegesType complex type 42Details - schema clickonce.v1

customHostSpecified Type complex type 43Details – schema clickonce.v1

customHostSpecified element 43Details - schema reldata

RelData element 63RelDataType complex type 63

Details - schema vsta.v3addIn element 44addInType complex type 44applicationType complex type 48entryPointsCollectionType complex type 45entryPointsType complex type 45entryPointType complex type 46postActionDataType complex type 48postActionEntryPointtype complex type 46postActionsType complex type 47postActionType complex type 48simple types 49updateType complex type 47

Details - schema vsto.v4appAddInType complex type 50customizations element 49customizationsType complex type 49customizationType complex type 50keyStringType simple type 52loadBehaviorType simple type 51

Details - schema xmldsig#CanonicalizationMethod element 53CanonicalizationMethodType complex type

57CryptoBinary simple type 62DigestMethod element 54DigestMethodType complex type 60DigestValue element 55DigestValueType simple type 62KeyInfo element 55KeyInfoType complex type 60KeyValue element 55KeyValueType complex type 61Reference element 54ReferenceType complex type 58RSAKeyValue element 55RSAKeyValueType complex type 61Signature element 52SignatureMethod element 53SignatureMethodType complex type 58SignatureType complex type 56SignatureValue element 52SignatureValueType complex type 56SignedInfo element 53SignedInfoType complex type 57Transform element 54Transforms element 54TransformsType complex type 59TransformType complex type 59

Details – URN 01-REL-R-NS

Grant complex type 65Issuer complex type 65License complex type 64license element 64Right complex type 66

Details – xmldsig#CanonicalizationMethod element 69CanonicalizationMethodType complex type

74CryptoBinary simple type 80DigestMethod element 71DigestMethodType complex type 77DigestValue element 71DigestValueType simple type 81KeyInfo element 72KeyInfoType complex type 78KeyValue element 72KeyValueType complex type 79Object element 71ObjectType complex type 77Reference element 70ReferenceType complex type 75RSAKeyValue element 72RSAKeyValueType complex type 80Signature element 69SignatureMethod element 70SignatureMethodType complex type 75SignatureType complex type (section 2.4.3.3.1

73, section 2.4.3.3.2 74)SignatureValue element 69SignedInfo element 69SignedInfoType complex type 74Transform element 71Transforms element 70TransformsType complex type 76TransformType complex type 76X509Data element 72X509DataType complex type 79

Details schema asm.v1assemblyType complex type 27

E

Elements – Authenticode schemaAuthenticodePublisher 66ManifestInformation 66SignedBy 66Timestamp 67

Elements – schema asm.v1assembly 26

Elements – schema asm.v2application 30assemblyIdentity 31dependency (section 2.1.2.1.2 18, section

2.2.2.1.4 30)deployment 18entryPoint 30file 30

110 / 113




publisherIdentity (section 2.1.2.1.3 18, section 2.2.2.1.7 31)

trustInfo 30Elements – schema asm.v3

asmv3 41Elements – schema clickonce.v1

customHostSpecified 43Elements - schema reldata

RelData 63Elements - schema vsta.v3

addIn 44Elements - schema vsto.v4

customizations 49Elements - schema xmldsig#

CanonicalizationMethod 53DigestMethod 54DigestValue 55KeyInfo 55KeyValue 55Reference 54RSAKeyValue 55Signature 52SignatureMethod 53SignatureValue 52SignedInfo 53Transform 54Transforms 54

Elements – URN 01-REL-R-NSlicense 64

Elements – xmldsig#CanonicalizationMethod 69DigestMethod 71DigestValue 71KeyInfo 72KeyValue 72Object 71Reference 70RSAKeyValue 72Signature 69SignatureMethod 70SignatureValue 69SignedInfo 69Transform 71Transforms 70X509Data 72

Examples 87Application Manifest 89Deployment Manifest 87

F

Fields - security index 93Fields - vendor-extensible 13

G

Global attributesAuthenticode schema 67

schema asm.v1 14schema asm.v2 31schema asm.v3 42schema clickonce.v1 43schema reldata 63schema vsta.v3 44schema vsto.v4 49schema xmldsig# 56URN 01-REL-R-NS 64xmldsig# 73

Global attributes – schema asm.v1application manifest 26

Glossary 10

H

HashTransforms.Identity algorithm 81http

//schemas.microsoft.com/windows/pki/2005/Authenticode 105

I

Implementer - security considerations 93Index of security fields 93Informative references 12Introduction 10

L

Localization 12

N

Normative references 11

O

Overview (synopsis) 12

P

Product behavior 107PublicKeyBlob format algorithm 83

R

References 10informative 12normative 11

REL license verification algorithm 84Relationship to protocols and other structures

12

S

Schema asm.v1assembly element (section 2.1.1.1.1 14,

section 2.2.1.1.1 26)

111 / 113




assemblyIdentityType complex type (section 2.1.1.3.1 14, section 2.2.1.3.1 26)

assemblyType complex type (section 2.1.1.3.3 15, section 2.2.1.3.2 27)

descriptiontype complex type 15fileNameString simple type 17fileNameStringType simple type 29fourPartVersionType simple type (section

2.1.1.4.3 17, section 2.2.1.4.3 29)global attributes 14publicKeyTokenType simple type (section

2.1.1.4.2 17, section 2.2.1.4.2 28)twoPartVersionType simple type (section

2.1.1.4.1 16, section 2.2.1.4.1 28)Schema asm.v2

application element 30applicationRequestMinimumType complex

type 37applicationType complex type 31assemblyIdentity element 31assemblyIdentityType complex type (section

2.1.2.3.5 21, section 2.2.2.3.8 35)defaultAssemblyRequestType complex type

38dependency complex type 19dependency element (section 2.1.2.1.2 18,

section 2.2.2.1.4 30)dependencyType complex type 32dependencyTypeType simple type 40dependentAssemblyType complex type (section

2.1.2.3.3 20, section 2.2.2.3.3 32)dependentOSType complex type 33deployment complex type 19deployment element 18entryPoint element 30entryPointType complex type 36file element 30fileNameStringType simple type (section

2.1.2.4.2 23, section 2.2.2.4.4 40)fileType complex type 39fourPartVersionType simple type (section

2.1.2.4.1 22, section 2.2.2.4.5 41)global attributes 31hashType complex type (section 2.1.2.3.4 21,

section 2.2.2.3.4 33)OneByteVersion simple type 39osType complex type 34osVersionInfoType complex type 34PermissionSetType complex type 38product attribute 19publicKeyTokenType simple type (section

2.1.2.4.3 23, section 2.2.2.4.6 41)publisher attribute 19publisherIdentity element (section 2.1.2.1.3 18,

section 2.2.2.1.7 31)publisherIdentityType complex type (section

2.1.2.3.6 22, section 2.2.2.3.9 35)

securityType complex type 37trustInfo element 30trustInfoType complex type 36TwoByteVersion simple type 39

Schema asm.v3asmv3 element 41asmv3Type complex type 42global attributes 42requestedExecutionLevelType complex type

42requestedPrivilegesType complex type 42simple types 43

Schema clickonce.v1customHostSpecified element 43customHostSpecifiedType complex type 43global attributes 43simple types 44

Schema vsta.v3addIn element 44addInType complex type 44applicationType complex type 48entryPointsCollectionType complex type 45entryPointsType complex type 45entryPointType complex type 46global attributes 44postActionDataType complex type 48postActionEntryPointType complex type 46postActionsType complex type 47postActionType complex type 48updateType complex type 47

Schema vsto.v4appAddInType complex type 50customizations element 49customizationsType complex type 49customizationType complex type 50global attributes 49keyStringType simple type 52loadBehaviorType simple type 51

SecurityDigital Signatures 93field index 93implementer considerations 93

Simple typesAuthenticode schema 68schema asm.v3 43schema clickonce.v1 44schema reldata 63schema vsta.v3 49URN 01-REL-R-NS 66xmldsig#

CryptoBinary 80DigestValueType 81

Simple types – schema asm.v1fileNameString 17fileNameStringType 29fourPartVersion 17fourPartVersionType 29

112 / 113




publicKeyTokenType (section 2.1.1.4.2 17, section 2.2.1.4.2 28)

twoPartVersion 16twoPartVersionType 28

Simple types – schema asm.v2dependencyTypeType 40fileNameStringType (section 2.1.2.4.2 23,

section 2.2.2.4.4 40)fourPartVersionType (section 2.1.2.4.1 22,

section 2.2.2.4.5 41)OneByteVersion 39publicKeyTokenType 23TwoByteVersion 39TwoByteVersionType 41

Simple types – schema asm.v3asmv3Type 42requestedExecutionLevelType 42requestedPrivilegesType 42

Simple types - schema vsto.v4keyStringType 52loadBehaviorType 51

Simple types - schema xmldsig#CryptoBinary 62DigestValueType 62

Software publisher certificate processing algorithm 84

Software publisher identity verification algorithm 83

Strong name signature 52Structures

algorithms 81application manifest 26deployment manifest 14overview 14strong name signature 52

Structures – schema asm.v1assembly element 14global attributes 14

T

Timestamp processing algorithm 84Tracking changes 108

V

Vendor-extensible fields 13Verification of strong name signature

algorithm 81Versioning 12

X

XML schema filesapplication manifest xml schemas 97deployment manifest xml schemas 94http

//schemas.microsoft.com/windows/pki/2005/Authenticode 105

Xmldsig#CanonicalizationMethodType complex type

74CryptoBinary simple type 80DigestMethodType complex type 77DigestValueType simple type 81KeyInfoType complex type 78KeyValueType complex type 79ObjectType complex type 77ReferenceType complex type 75RSAKeyValueType complex type 80Signature element 69SignatureMethodType complex type 75SignatureType complex type 74SignedInfoType complex type 74TransformsType complex type 76TransformType complex type 76X509DataType complex type 79

113 / 113




Documents

interoperability.blob.core.windows.net › files › M… · Web view[MS-OSCO]: Office Server ClickOnce Manifest Structure Intellectual Property Rights Notice for Open Specifications